These 5 critical Windows Defender settings are off by default - turn them on ASAP

2026-05-05 · Source: News and Advice on the World's Latest Innovations | ZDNET · Field: Technology & Digital — Cybersecurity & Data Privacy, Cloud Computing & IT Infrastructure · Depth: Novice, medium

Summary

ZDNET outlines five optional security settings within Windows Defender for Windows 10 and 11 that enhance PC protection against various threats, despite being disabled by default. These include "Controlled folder access" to prevent ransomware from modifying sensitive files, "Memory integrity" to block malicious drivers from infecting the Windows kernel, and "Potentially unwanted app blocking" to combat adware and crypto miners. Additionally, "Smart app control" offers stricter, granular blocking of untrusted applications, and "Tamper protection" safeguards core security settings from being disabled or modified by sophisticated malware. The article emphasizes that while Microsoft considers default Defender settings sufficient for most users, activating these additional features can provide maximum security, with a recommendation to enable them one at a time to identify and resolve potential conflicts.

Key takeaway

For IT professionals managing Windows endpoints or individuals seeking maximum personal PC security, you should consider activating Windows Defender's advanced, optional protections. Systematically enable features like Controlled folder access and Memory integrity one at a time, monitoring for conflicts, to significantly bolster defenses against ransomware, malware, and sophisticated exploits beyond default settings.

Key insights

Windows Defender offers advanced, disabled-by-default settings for enhanced PC security against diverse threats.

Principles

• Default security is often insufficient.
• Layered security enhances protection.
• Test security changes incrementally.

Method

Access Windows Security via Settings > Privacy & security. Navigate to specific protection categories (e.g., Virus & threat protection, Device security, App & browser control) to enable individual advanced settings like Controlled folder access or Memory integrity.

In practice

• Enable Controlled folder access for ransomware.
• Activate Memory integrity for kernel protection.
• Turn on Tamper protection to secure settings.

Topics

• Windows Defender
• Ransomware Protection
• Memory Integrity
• Potentially Unwanted Applications
• Smart App Control

Best for: IT Professional, General Interest

Related on AIssential

• The best antivirus software for Windows 11 in 2026: Expert tested and reviewed — Selecting antivirus software requires balancing protection features, resource usage, user interface, and cost.
• Hackers are abusing unpatched Windows security flaws to hack into organizations — Public disclosure of Windows Defender exploits by a disgruntled researcher led to active exploitation by hackers.
• The Dumbest Reason Systems Get Compromised Is Still Default Passwords — Default credentials remain a critical vulnerability due to enterprise scale, necessitating automated, comprehensive testing.
• How a malicious link could bypass your PC’s built-in SmartScreen — Zero-day vulnerabilities in Windows and Office are under active exploitation, bypassing built-in security features like SmartScreen.
• Securing Azure AI Applications: Against Prompt Injection | Part - 2 — Prompt injection is an inherent LLM vulnerability requiring defense-in-depth across all application layers, treating all input as untrusted.
• Why modern software development begins at the application layer — Application security must shift left, integrating early into development to counter accelerating delivery and AI-introduced vulnerabilities.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by News and Advice on the World's Latest Innovations | ZDNET.