First, you'll need to download the troubleshooter. Download troubleshooter. If you see the File Download box when you start downloading, select Run or Open. The troubleshooter provides steps for you to follow. If a program isn't listed in the uninstall options, you'll be asked for that program's product code.

Learn how to update your security processor or TPM firmware to protect Windows 10 and your device from attacks by malicious software.

Follow these steps to automatically diagnose and repair Windows security problems by turning on UAC, DEP protection, Windows Firewall, and other Windows security options and features. Select the Download button on this page. In the File Download dialog box, click Run or Open, and then follow the steps in the Windows Security Troubleshooter. Notes:

First, you'll need to download the troubleshooter. Download troubleshooter. If you see the File Download box when you start downloading, select Run or Open. The troubleshooter provides steps for you to follow. If a program isn't listed in the uninstall options, you'll be asked for that program's product code.

When you start your computer successfully, the Windows Registry Checker tool (Scanreg.exe) creates a backup of system files and registry configuration information (including user account information, protocol bindings, software program settings, and user preferences) once daily.

Potentially unwanted app blocking was first introduced in the Windows 10 May 2020 update and is turned off by default for enterprise and consumer customers. Note: Beginning in September of 2021 we will only be blocking cryptomining software as PUA for enterprise customers. How do I configure it?

Windows devices that has Unified Extensible Firmware Interface (UEFI) based firmware can run with Secure Boot enabled. The Secure Boot Forbidden Signature Database (DBX) prevents UEFI modules from loading. This update adds modules to the DBX. A security feature bypass vulnerability exists in secure boot.

To help keep Windows devices secure, Microsoft adds vulnerable bootloader modules to the Secure Boot DBX revocation list (maintained in the system UEFI-based firmware) to invalidate the vulnerable modules.

To use memory integrity, you must have hardware virtualization enabled in your system’s UEFI or BIOS. If memory integrity fails to turn on, it may tell you that you have an incompatible device driver already installed. Check with the manufacturer of the device to see if they have an updated driver available.

Blue Screen errors (also called bug checks, STOP code errors, kernel errors, or BSOD errors) can occur if a serious problem causes Windows to shut down or restart unexpectedly to protect itself from data loss. You might see a message that says, "Windows has been shut down to prevent damage to your computer" or a similar message.