The Windows Settings Worth Ten Minutes of Your Time

By NorwegianSpark Editorial · Published August 8, 2026 — written with AI assistance and reviewed by the NorwegianSpark SA editorial team.

A fresh Windows installation is configured for convenience and for the manufacturer's telemetry, not for privacy. Most of it is adjustable, and a handful of changes account for nearly all the benefit.

The aim here is not a locked-down machine. Stripping Windows aggressively tends to break updates and features while achieving little, and it is a common route to an unstable system. These are the changes with a real effect and low cost.

Advertising ID

Windows assigns your account an advertising identifier that apps use to build a profile across everything you run.

Turn it off in Privacy settings. Apps stop receiving a shared identifier to correlate your activity. There is no downside beyond less targeted ads, which most people consider the point.

Diagnostic data

Windows sends usage and diagnostic information back to Microsoft, and the default is usually the fuller of the two levels.

Set it to the minimum available. On consumer editions you cannot switch telemetry off entirely, and claims otherwise usually involve registry edits that either do not work or break updating. Reducing it to required-only is the meaningful, supported change.

While there, look for the option to delete diagnostic data already collected, and turn off tailored experiences — the feature using that data to personalise tips and suggestions.

Location

Location is genuinely useful for maps and weather, and unnecessary for most other software.

Rather than disabling it globally, open the per-app list and turn off the ones with no reason to know. Also clear the location history, which is retained on the device.

App permissions, one pass

The permissions list — camera, microphone, contacts, calendar, files — is worth a single review. Most systems accumulate apps holding permissions they were granted once and never needed again.

Camera and microphone deserve particular attention, since those are the ones people assume are tightly held and frequently are not.

Activity history and search

Windows records app and file activity, and by default the search box queries the web and sends what you type. Turn off web results in search if you only want to find things on your own machine — the local search is faster without it.

Activity history can be disabled and cleared in the same settings area.

The account question

Windows increasingly pushes a Microsoft account rather than a local one. A Microsoft account syncs settings, enables device recovery and is required for some features. It also ties your device activity to an online identity.

A local account keeps things on the machine, at the cost of that sync and recovery. Neither choice is wrong; the point is that it is a choice, and the setup process is designed so that most people never realise they made one.

What is not worth doing

• Third-party "privacy tools" that flip hundreds of settings. They frequently break updates, the Store, or search, and the damage surfaces weeks later when the cause is hard to identify.
• Disabling Windows Update. Whatever telemetry it carries, an unpatched system is a far larger risk than the data it sends.
• Turning off built-in security. Windows Defender is competent. Disabling it for privacy reasons trades a real protection for a marginal gain.
• Registry edits from forum posts. Undocumented changes produce problems nobody can diagnose, including you, a month later.

The ten-minute pass

Advertising ID off. Diagnostic data at minimum, previously collected data deleted, tailored experiences off. Location reviewed per app. Camera and microphone permissions pruned. Web results in search off. Activity history cleared.

That covers the overwhelming majority of the practical benefit without touching anything that can break your machine — and it stays fixed, because none of it is the kind of change an update reverts.