Four calls in the first week. That is roughly my average after handing a freshly set up Windows 11 machine to someone who doesn’t work in IT. Not because the hardware is bad or Windows 11 is broken, but because the out-of-box experience is built for a version of your relative or coworker who reads settings menus for fun. They don’t. So the setup job is really about removing decisions before they get a chance to make them badly.
Here is how I prep a machine now, in the order I actually do it, with the reasoning behind each step so you can skip the ones that don’t apply to your person.
Start with the account, not the desktop
Create a local administrator account for yourself and a standard user account for them. This one decision saves more support calls than anything else on this page. When they click something they shouldn’t, and they will, the damage is contained to their profile. When you need to install something or change a system setting, you sign in with your own account and do it cleanly.
Set the machine to sign in automatically if they live alone. Password fatigue is real, and a sticky note with a password on the monitor is worse security than no password prompt at all. If they share the machine or take it out of the house, skip this.
Cut the background noise before it becomes a complaint
A slow PC complaint is almost always a background process complaint. Windows 11 ships with a crowd of startup apps and background permissions that the average user never asked for. Microsoft’s own performance guidance points at three fixes that are genuinely worth doing on day one.
- Uninstall the junk. Settings > Apps > Installed apps. Game launchers, trial antivirus, the manufacturer’s “assistant” software. If you didn’t put it there and they won’t use it, it goes.
- Trim startup apps. Ctrl + Shift + Esc, then Startup apps. Disable anything they don’t recognise. That includes the vendor updater that pops a window every boot.
- Kill background permissions for the apps that don’t need them. Settings > Apps > Installed apps, then Advanced options on each one, and set the background permission to Never for anything that isn’t a mail client or a sync tool.
While you’re in there, set the power mode to Best performance unless battery life matters more than speed. On a desktop this costs nothing. On a laptop, think it through.
One more: the visual effects. Open the performance options in Windows and either set it to adjust for best performance or, if you want it to still look like Windows 11, leave animations on and turn off the transparency effects. On older hardware the difference is noticeable. On a modern machine it’s cosmetic, so use your judgement.
Lock down the settings that generate confusing prompts later
This is the part most people skip, and it’s the part that produces the “a window popped up and I clicked yes” phone call.
Open Settings > Privacy & security and work through it methodically. Diagnostic & feedback: turn off Send optional diagnostic data. That optional data includes app activity and browsing history, which nobody needs to share to keep their PC working.
While you’re on that page, turn off Improve inking and typing. It’s another feedback channel, and turning it off breaks nothing.
Then go to General and turn off the advertising ID. I explain it to people this way: Windows stamps a unique number on your profile and apps can use it to build a picture of what you do. Turning it off doesn’t remove ads from Windows, but it stops the personalised tracking behind them. Fewer surprises, fewer targeted pop-ups that look like system warnings.
Under Speech, turn off online speech recognition if they won’t dictate. It sends audio to Microsoft for processing. Leave it on only if they actually use voice typing.
Finally, App permissions. Go through camera, microphone, location, and the rest one category at a time. A note-taking app has no business touching the microphone. This is the most tedious part of the setup and the one I consider non-negotiable. If you do one privacy pass, do this one.
Updates: turn them on and set the window
Windows Update stays enabled. Fighting it is a losing battle, and unpatched machines are how people end up with the problems they call you about. But you can stop updates from rebooting the machine mid-afternoon.
Set active hours in Windows Update so it won’t restart while they’re working. Then check Optional updates occasionally, because drivers and firmware sometimes land there rather than in the main feed. I check it right after setup and leave it alone after that, since chasing every optional driver is how you end up rolling things back.
Set up a backup before you hand it over, not after
Data loss is the support call you cannot fix over the phone. ZDNET’s roundup of backup tools makes the same point in its opening: it always happens when you least expect it. OneDrive is already on most Windows 11 installs and it’s fine for documents and photos if they’re signed in. If they have photos or work files that would hurt to lose, get a real backup running, either OneDrive with enough storage or a dedicated tool that copies to an external drive. Set it up, confirm the first backup finishes, then explain in one sentence where their files live.
Leave a short written note
Not a manual. Three or four lines taped inside a drawer or saved as a text file on the desktop: how to sign in, where their files are, and which number to call. People don’t remember screen tours, but they will find a note.
The machine itself is the easy part. What you’re really configuring is a support relationship, and every decision above exists to make that relationship less frequent. Uninstall the noise, tighten the permissions, set the update window, confirm the backup, and then leave it alone. The next call you get should be about something they actually did, not something Windows did to them.