Personal Computer Security Guidelines for Windows

Security best practices and guidelines for personally owned computers running the Windows operating system.

Introduction

If you don’t have a UO-provided laptop and you're planning to work remotely using your personal device, you’ll need to take extra steps to make sure your work stays secure. Below are the UO's Personal Device Security Guidelines for Windows computers. Guidelines for macOS can be found here..

Remember, even if you’re working remotely, we are here still here to support you. If you need help, contact your department or unit IT or the Technology Service Desk.

Information

Apply Updates 

Enable automatic updates on your computer and web browser to keep your system secure and up to date.

• Apply updates on your PC 
• On your web browser (if you’re not using Edge) 
  • Google Chrome 
  • Mozilla Firefox 

Prevent unauthorized access

Enable automatic updates on your computer and web browser to keep your system secure and up-to-date: 

• Open Windows Security
  • Start > Settings > Update & Security > Windows Security
• Enable Windows Defender and Application Firewall 
  • Detailed Information 
• UO has a site license for McAfee, faculty, staff, and students can install the anti-virus product without cost 
  • Please use McAfee Endpoint Security or Windows Defender, not both 
  • Install the unmanaged version of McAfee Endpoint Security 

Use strong passwords 

• How to create a strong password 

Encrypt your hard drive 

Before you encrypt your computer

• Save your recovery key and computer password somewhere safe!If you lose them, you will lose access to your own computer!
• Back up your computer files to a secure cloud service or external hard drive. (Note: External hard drives should also be encrypted, with the same caution to make sure you save the recovery key.)

How to encrypt

• Home versions of Windows do not offer hard disk encryption. If you have a Professional, Educational or Enterprise version of Windows, encryption is provided with Bitlocker. You can configure it by going to  Control Panel >System and Security> Bitlocker Drive Encryption. 
  • Detailed instructions 
• Once you have enabled Bitlocker, remember to save your encryption key! 

Lock your screen

• To set your PC to lock automatically when the screen saver pops up 
  1.  Go to  Control Panel > Appearance & Personalization > Change screen saver  
  2.  Check the box for On resume, display log on screen.  
• You can lock your computer screen by pressing  Windows Key + L  or by pressing Ctrl+Alt+Delete and choosing  Lock.