Every new Windows machine passes through a short window in which the order of setup decides how the next few years go. Get the order right and you end up with a machine that is current, secured, backed up and quick. Get it wrong and you either lose a weekend to a reinstall, or you find out in month three that the only copy of an important folder lived on a drive that has just died.
This is the order I use, and the reasoning behind each position in it. It is written for an ordinary work machine, not a lab bench.
The four choices that are expensive to reverse
First run asks a handful of questions. Most of them you can change later. These four you can technically change later too, but in practice you never will.
Online account or local account. An online account syncs settings and makes licence recovery simpler. A local account keeps the machine's login offline, which is usually the better answer for a shared, shop-floor or hand-me-down machine.
Region and keyboard layout. Check both before you type a single password. A wrong layout still produces characters, so the mistake hides for weeks and then costs you a locked account.
Privacy toggles. First run offers several optional data-sharing switches. Decide each one deliberately. They stay editable under Settings, but almost nobody goes back.
OneDrive folder backup. Windows offers to sync Desktop, Documents and Pictures. On a personal machine that is a genuine convenience. On a machine joined to a company file server it is a reliable source of confusion about which copy is the real one.
| Choice | Take it when |
|---|---|
| Online account | Personal laptop, you want settings sync and easy licence recovery |
| Local account | Shared counter, shop floor, or you prefer an offline login |
| OneDrive backup on | Personal files with no other backup yet |
| OneDrive backup off | Machine tied to a company network that already has storage |
One small thing while you are here: if the machine arrived with a trial antivirus or a manufacturer helper tool, leave it alone for now. You will clear it out later, after the updates, so that you only restart once.
Updates before apps, and why "it feels slow" is a false alarm
Run the update cycle to exhaustion before you install anything of your own. A machine that has been sitting in a box for months can be several rounds behind, and each round may want its own restart.
Open Settings, go to Windows Update and keep choosing Check for updates until it stops finding work. A fresh machine commonly needs two or three passes with a restart between each. Then open Advanced options, then Optional updates, then Driver updates, and take everything offered for chipset, graphics, audio and networking. On a laptop, also visit the manufacturer's support page for the model-specific chipset and graphics packages — the generic Windows drivers function, but the vendor versions tend to handle power management better.
Finish with one more restart and one more check. Windows frequently stages updates and only completes them on reboot, which is exactly why a machine can look fully patched while still running an old build; you can confirm the build under Settings, then System, then About.
If the machine feels sluggish during this stage, that is normal — indexing and update installation are using real resources. Judge performance only once the updates have finished. If it is still slow after that, the fix is a cleanup pass, not a reinstall.
The admin split is worth more than any antivirus
The most valuable security habit on a new PC is not an antivirus product. It is refusing to do daily work as an administrator. Most malicious installers need admin rights to install themselves properly, and an everyday account simply does not have them.
Set up a second account that holds administrator rights, and reserve it for installing software and changing system settings. Do your mail, browsing and office work from the ordinary account instead.
Then, in order: switch on two-factor authentication for your main email before you sign that email into anything else, because a compromised mailbox compromises every password reset that flows through it. Enable Windows Hello if the machine has a fingerprint reader or a suitable camera — a device-bound PIN is quicker than a typed password and much harder to phish. Turn on device encryption on any laptop; it costs nothing and makes a stolen machine far less valuable. And write the recovery key somewhere that is not the laptop, because a recovery key that exists only on the encrypted machine is not a recovery key at all.
Clear the factory bundle, then decide where files live
New machines ship with trials and manufacturer utilities that launch at startup and quietly consume memory and disk. Clearing them now takes minutes; diagnosing them later takes an evening.
Remove trials and toolbars from Settings, then Apps, then Installed apps, sorting by install date so the factory bundle stands out. Open Task Manager, go to Startup apps and disable anything you do not need at login — on a new machine this single change buys more responsiveness than any other tweak. Then open Settings, then System, then Storage, and switch on Storage Sense so temporary files clear themselves.
While you are in storage settings, settle the layout: system and applications on the system drive, documents and media on the second drive if there is one. Changing this later is genuinely irritating.
Backup goes in before the data does
Set up backup before you have anything worth losing. The practical minimum is one copy on an external drive plus one copy somewhere off the machine. For the off-machine half, a scheduled imaging tool turns the job into something that happens without you remembering it — a workable rhythm is a full image monthly and a file backup weekly.
Then test one restore inside the first month. A backup you have never restored from is a hope rather than a plan.
The install order for the first apps
Install in an order that lets later apps lean on earlier ones. Doing it the other way round is how people end up with a browser that has no password manager and an office suite with nowhere to put its files.
- A browser you will actually use, plus a second one reserved for banking or anything you want kept separate. Sign in and sync.
- A password manager, or your browser's built-in vault, before you start signing into anything.
- An office suite — whichever one your clients or colleagues use. Compatibility beats feature lists.
- Cloud storage for files that need to exist on more than one device.
- A backup tool for the machine itself, kept separate from file sync. Sync is not backup: remove a file on one device and it vanishes everywhere.
- Communication apps last, once the security tools above are already in place.
Resist installing everything at once. Every app adds startup entries and background services, and a machine that boots with thirty of them will feel slow regardless of the hardware inside.
Fifteen minutes of habits, then a first-week shakedown
A new PC is the cheapest moment you will ever get to fix the habits that annoyed you on the old one.
| Area | Set up | Why it pays |
|---|---|---|
| Keyboard | The shortcuts you use most | Biggest daily time saver on any machine |
| Files | One folder structure, decided now | Stops the desktop becoming a storage drive |
| Folders or rules from day one | Keeps the inbox usable at 500 messages | |
| Power | Sleep and battery settings for your routine | Directly affects how long a laptop lasts |
| Display | Scaling and text size | Less fatigue on long days |
Two of those deserve doing immediately. Learn the shortcuts — a small set of window and text-editing keys repays itself every day. And decide the folder structure now, before files scatter themselves across Downloads, Desktop and Documents.
If you work alongside other people, set up file sharing and meeting tools properly as well. Remote collaboration breaks down far more often because of unclear file locations than because of bad software.
Then spend the first week deliberately using the machine. Faults surface early, and returning a machine in week one is far easier than arguing about it in month three.
- Plug something into every port at least once — USB, display output, card reader, audio.
- Look at the screen on a plain white background and a plain black one; dead pixels and backlight bleed are easiest to spot that way.
- Run it under real load once. A large export or file copy will expose thermal throttling and fan noise that idle use never reveals.
- On a laptop, unplug and work normally for an hour, and note the battery drop so you have a baseline.
- Confirm the licence and warranty are registered, and file the invoice where you can find it.
- Do one full backup and one test restore before you depend on the machine for real work.
Finally, write the machine's key details somewhere outside the machine: model, serial number, edition of Windows, purchase date, and the licence key if it is not attached to an online account. Two years from now, when you need warranty service, that note will be worth more than any diagnostic utility.
Questions people ask
Should a new PC use an online account or a local one?
Use an online account on a personal laptop if you want settings to sync and licence recovery to be easy. Use a local account on a shared, shop-floor or company machine, or whenever you would rather the login stayed offline.
Is a third-party antivirus needed on a new Windows PC?
The built-in protection is sufficient for most home and small-office machines provided it stays current. The larger risk is the account you work from: an everyday non-administrator account stops most malicious installers before they start.
How long does a proper setup take?
Budget two to three hours spread across a day, most of it spent waiting on updates. The configuration itself is quick; Windows and driver updates are what consume the time, and skipping restarts only stretches it out.
Should the manufacturer's preinstalled software be removed?
Yes, for anything that launches with Windows or keeps prompting you to buy an upgrade. Keep the utilities you genuinely use and remove the rest — startup time and background resource use both improve.
What is the difference between cloud sync and a backup?
Sync keeps copies current across devices, so deleting a file in one place removes it everywhere. A backup keeps historical copies, which is what lets you recover a deleted file or an earlier version. Most people need both, and a new machine is the easiest place to get the habit right.
Top comments (0)