On June 9, 2026, Microsoft rolled out its most extensive security update to date, addressing approximately 200 vulnerabilities, including three critical zero-day exploits. This significant event coincides with the impending expiration of Secure Boot certificates that have been in place since 2011, beginning later this month. As such, June presents an opportune moment to engage with the Windows 11 Settings app, ensuring your system is both secure and optimized.
Why review your Windows 11 settings in June 2026?
The convergence of these two events—the monumental Patch Tuesday and the expiration of Secure Boot certificates—highlights the necessity of a thorough settings review. The June update is particularly crucial as it is the last before the certificates begin to expire, making it essential to verify your settings now to safeguard your system during this transition. A quick examination can also reveal privacy and performance defaults that Windows may have set unfavorably.
Install the June update and turn on faster delivery
Begin by accessing the Settings app, navigating to Windows Update, and selecting “Check for updates” to ensure the June 9 cumulative patch is installed. While on this page, enable the toggle for “Get the latest updates as soon as they’re available.” This setting allows non-security fixes to reach your device sooner, while still ensuring regular security updates are received. Given the importance of this month’s update, it is advisable to take this step without delay.
Turn on Core Isolation memory integrity
Next, open Windows Security from the Start menu, select Device security, and click on the “Core isolation details” link. Here, you can switch Memory integrity to On. This feature, also known as Hypervisor-protected Code Integrity, utilizes your PC’s virtualization hardware to protect high-security processes from malware attacks. If you encounter issues enabling this feature, Windows will typically identify any incompatible drivers, which can often be resolved by updating or removing them.
Switch on Controlled folder access against ransomware
Within Windows Security, navigate to “Virus & threat protection,” scroll to “Ransomware protection,” and click “Manage ransomware protection.” Enable Controlled folder access to monitor and protect your critical folders, such as Documents and Pictures, from unauthorized applications. This feature automatically safeguards Windows system folders, and if a trusted application is mistakenly blocked, you can easily add it to the safe list.
Confirm your drive is actually encrypted
To ensure your data is secure, go to Settings, select Privacy & security, and open Device encryption. For Windows 11 version 24H2, a clean install that meets hardware requirements will automatically enable encryption. However, if you upgraded from an older version, your drive may still be unencrypted. If the toggle is Off, enable it and ensure your recovery key is backed up securely.
Disable the advertising ID and tailored experiences
In the Settings app, navigate to Privacy & security, then General. Disable the option that allows apps to show personalized ads using your advertising ID, as well as the settings for locally relevant content and tailored experiences. While this will not reduce the number of ads you see, it will prevent apps from creating a comprehensive profile of your activity.
Cut diagnostic data to the minimum
Head to Settings, select Privacy & security, and open “Diagnostics & feedback.” Turn off “Send optional diagnostic data” and any related toggles for inking and typing improvements. Windows will continue to send essential diagnostic data necessary for updates and security, but minimizing optional data will help protect your privacy.
Audit your camera, microphone, and location permissions
Open Settings, choose Privacy & security, and review the permissions for Camera, Microphone, and Location. Each section provides a list of apps with access to these sensors, allowing you to revoke permissions for any applications that do not require them. The recent activity feature will help you identify any unexpected usage.
Which Windows 11 settings improve performance?
To enhance performance, focus on three key adjustments. First, navigate to Settings, select Apps, then Startup, and disable any unnecessary applications that launch at startup. Each entry is rated for impact, and reducing this list can significantly improve boot times. Second, enable Storage Sense under Settings > System > Storage to allow Windows to manage temporary files automatically. Finally, adjust the Power mode under Settings > System > Power & battery to “Best performance” when plugged in, while keeping it on “Balanced” during battery use to conserve power.
Tune visual effects for a snappier feel
For systems with older or lower specifications, search for “Adjust the appearance and performance of Windows” in the Start menu. Opt for “Adjust for best performance” to disable animations and transparency, trading aesthetics for responsiveness. Alternatively, you can manually select which visual effects to keep, allowing for a balance between performance and visual appeal.
Frequently Asked Questions
Does changing Windows 11 settings actually speed up my PC?
Indeed, some adjustments can enhance speed, while others improve the overall responsiveness of your system. Disabling startup applications and activating Storage Sense can free up resources, leading to faster boot times and reduced background load.
Is it safe to turn off Windows 11 telemetry?
Yes, you can safely disable optional diagnostic data and advertising ID features without compromising system functionality. Windows will continue to send necessary baseline data for updates and security.
Will disabling the advertising ID stop ads?
No, while you will still encounter the same volume of ads, they will be less targeted as apps can no longer build a comprehensive profile of your activity.
Which settings matter most for security?
Prioritize installing the latest Windows Update, enabling Core Isolation memory integrity, activating Controlled folder access, and confirming that device encryption is enabled with a backed-up recovery key. These measures collectively address patching, driver-level vulnerabilities, ransomware threats, and physical data protection.
