Enable ALL These Windows Security Features!

▼ Time Stamps: ▼
0:00 - Intro
0:27 - Windows Sandbox
2:26 - Exploit Protection
4:07 - Very Good Thing
5:33 - Application Guard
7:30 - Reputation-Based Protection
9:12 - Memory Integrity
10:00 - Bitlocker Encryption
11:35 - Find My Device
11:56 - Controlled Folder Access

▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

[James-nooc]

The windows sandbox is actually really useful! On my machine it actually had Edge installed.

[OcteractSG]

9:15 Enabling memory integrity makes VirtualBox’s performance tank. I was going through my settings one day and enabled it. A month later when I wanted to use VirtualBox again, I was confused as to why its performance was so bad. Figuring it out was not easy.

[kathyharrison]

You are such a huge help to those of us unable to get anyone to answer!Questions others just look
when I ask often are lost to their understanding!! Thanks for all your HELP!!♥️♥️

[andreylucass]

I'm in favor of dedicated and detailed videos about those features.

[ankitbadani]

What types of services should we stop in the service tab in Windows 10? because many services consume a lot of RAM and CPU.

[Frosty]

Love this channel ever since you stopped doing satire. Such awesome videos and straight to the point information. Love you Thio! 😁

[ApfelJohannisbeere]

Thanks for the very nice recommendations!
I myself activated additionally to the ones I had the app protection in the windows features and the for the edge the guard one.

[doublebigMark]

Okay, the Sandbox one alone is godsend. Thanks Thio.

[ShinyTechThings]

Security is a teeter totter with ease of use. If you are completely secure, it's unusable and vice versa. It comes down to a balance of secure enough for everyday usability.

[dangingerich]

The Exploit Protection at 2:26 is for using the internal Windows Defender antivirus. If that is disabled, those settings will not work. If you're using a separate antivirus, this is irrelevant, and will be controlled by the separate antivirus, and will disable Windows Defender. Same goes for Application Guard at 5:33 and Reputation Based Protection at 7:30.

[Ceelbc]

Bitlocker is on laptops enabled by default (In the EU), because Microsoft is by EU law required to do everything they can to protect peoples data.

[zerotwogaming]

2:13 ThioJoe, great rundwon on Windows Sandbox! For those wonderng, while it’s perfect for checking out files you’re unsre about, just a heads up, it’s not ideal for everything. Like, don’t expec to run high-end games or tackle sophistcated viruses in it. But for that extra piece of mind with everyday downloads, it’s pretty neat. ThioJoe’s insights are always on point, and it’s cool to see featurs like this geting highlighted.

[Alkaris]

HyperVisor is really only needed if you run Virtual Machines on your PC where you need the extra security for devices connected through a passthrough to the virtual machine.

[MrCyberWolf]

Hyper-V does not have to be enabled to use Windows Sandbox. However, virtualization does need to be enabled. Virtualization is usually disabled by default in the bios settings of most motherboard manufacturers. You can check if virtualization is enabled on your computer by opening the Task Manager, clicking on the Performance tab, and clicking on CPU. On the bottom right, it should say “Virtualization: “ and “Enabled” or “Disabled.”

[platterjockey]

Thanks ThioJoe! I'm pretty savvy but there's always one or two things I forget about, like the Core Isolation setting.

[markbrad]

Thank you Theo. Only thing you missed was to turn on System Restore which is not on by default. Be handy if an update breaks an unsupported machine yes.

[PaulViranyi]

Great video as always. I like your Windows 11 theme, is it a custom theme?

[_SJ]

My wallpaper now is your "Another Failed Simulation" masterpiece

[Megalomon]

I'm curious about the impact on speed for applications, especially when it comes to games old and new. And ssd operations.

[fragalot]

Also you need to enable Virtualization in BIOS for Hyper Visor and Sandbox to be selectable in the first place.
This is kina awkward since on Ryzen having Virtualization enabled seems to interfere with using Ryzen Master for some odd reason and only let you run it. But if you're not overclocking then who cares? Also keep in mind Win10 calls it "Hyper-V, " and "Hyper Visor" in Win11 in the list of Windows Features, but they are exactly the same thing. You can enable Hyper Visor with Virtualization disabled, but you're just installed a client-side app that lets you connect to a hypervisor VM being ran on another PC or server on your network.