Windows and Edge security settings, explained

App Installation Control

App Installation Control decides who can install programs on your computers. A Windows setting lets everyday users install only approved apps; anything else needs the administrator's approval.

• Approved apps only: Programs from a list we agree with you, or from the Microsoft Store.
• Administrator approval: New or unknown programs need the administrator's OK.
• Clear message: Users see a notice instead of a silent, risky install.

Why control it? Most infections and junk software arrive through programs people install themselves. It blocks disguised malware and cracked software, stops adware and toolbars, protects children from unsuitable games, and keeps only licensed software on your computers. You can still install what you need: the administrator approves it and it installs normally.

Edge security settings: enabled & locked

Microsoft Edge has several protections built in. In this video we switch them on and lock them, so they stay on for every user.

• SmartScreen: Blocks dangerous websites and downloads.
• Automatic HTTPS: Always uses the encrypted version of a website.
• SafeSearch: Hides explicit and violent search results.
• Unwanted app blocking: Stops junk software from being installed.
• Typo protection: Warns you about fake look-alike websites.
• Do Not Track: Asks websites not to track what you do online.

TiD iT® adapts these settings to each home or office, helps you set them up, and keeps them up to date.

Ads: blocked & locked

Ads Block stops ads from appearing on websites and in apps: banners, pop-ups, video ads and full-screen ads. It uses lists of known ad servers and scripts and stops them before they reach your screen.

• Cleaner pages: You see the content, not the clutter.
• Faster loading: Less to download means pages open quicker.
• Less data: Helpful on mobile or limited plans.
• More privacy: Fewer cookies and trackers follow you.
• Fewer infections: You avoid malvertising: ads used to spread malware.

Sites you trust can still be allowed with your own rules.

SmartScreen: enabled & locked

SmartScreen is a Microsoft security feature built into Windows and Edge. It checks websites and files against a list of threats that Microsoft updates all the time.

• Phishing protection: Fake websites that try to steal passwords are blocked.
• Download checks: Files are compared with known malware before they open.
• Reputation: New and unknown programs are checked more carefully.
• Clear warnings: You see a warning before anything risky happens.

Why lock it? If SmartScreen can be switched off, one click or one piece of malware can remove your protection. Locked, it stays on for everyone, including less experienced users and children, and every computer has the same protection.

Automatic HTTPS: enabled & locked

A Microsoft Edge feature that switches websites to their encrypted version (HTTPS) automatically. If a site has no secure version, Edge opens the normal one and warns you that it is not secure.

• Encryption: Data sent to websites is scrambled, so nobody can read it on the way.
• Privacy: Others on the network cannot see what you browse.
• No effort: You do not need to type https:// yourself.
• Stops downgrade attacks: Attackers cannot force a secure connection back to an insecure one.

Turned on, it encrypts every connection it can. Locked, nobody can switch it off by mistake or on purpose.

Registry Editor (Regedit): disabled

The Registry Editor is a Windows tool for changing the system's deepest settings. It is meant for IT professionals: one wrong change can stop programs from working or stop Windows from starting, and changes take effect immediately, with no undo.

• No accidental damage: The system stays stable and keeps starting normally.
• Security stays on: Antivirus and firewall settings cannot be switched off.
• Privacy stays on: Privacy settings cannot be lowered.
• Rules stay in place: Children cannot bypass parental controls.

Only the administrator needs it, so we block it for everyone else.

InPrivate browsing: disabled & locked

InPrivate browsing leaves no history. On children's devices we turn it off, so parents can see which sites were visited and the filters cannot be bypassed.