A fresh Windows install is not finished when the desktop appears. The first hour decides how the PC will behave for years. This is the essential checklist — in the order that actually matters, with the risky folklore left out.
Most people install Windows, immediately load their apps, and only think about setup when something breaks. That order is backwards. Updates and drivers come first because everything else sits on top of them; backups come before tweaking because every later step is safer with a restore point behind it. Work through the cards below top to bottom and a new install becomes a machine you can trust.
A fresh install is almost never current. Updates arrive in rounds: one round unlocks the next, and a feature update may hide behind several smaller ones. Restart when asked and check again — stopping after the first round is the most common half-finished setup.
Windows Update installs working drivers for most hardware, and for a basic office PC that can be enough. But three drivers are worth fetching from the maker: the chipset driver (from the laptop or motherboard maker's support page for your exact model), the graphics driver (from NVIDIA, AMD or Intel), and audio or Wi-Fi drivers if anything misbehaves. Chipset goes first because other devices sit on it.
Skip third-party driver updater tools entirely — wrong automated driver picks are a classic cause of blue screens on a healthy new install.
devmgmt.msc (Device Manager) and confirm no device shows a yellow warning markChoose a Microsoft account or a local account with open eyes (there is a full comparison in this series). Whichever you choose, do two things now: create a second administrator account as a spare key for the day your main profile breaks, and, if you use a Microsoft account, confirm the BitLocker recovery key is saved in it — or if local, save that key to a USB stick or on paper.
Five minutes in Settings → Privacy & security: set diagnostics to the required basics, turn off the advertising ID, activity history and tailored experiences if you do not want them, and review which apps may use your camera, microphone and location. The graded version of this list — what matters and what is theatre — has its own page in this series.
Uninstall the preinstalled games and trial apps you will never open (Settings → Apps). Remove a trial antivirus if one came bundled — Microsoft Defender activates automatically underneath, so you are never left unprotected. Then open Task Manager → Startup apps and disable the updaters and launchers that do not need to run at sign-in. Both steps have detailed pages in this series.
This is the step everyone skips and everyone regrets. Attach an external drive and set up File History (or your image backup of choice) today, while there is nothing to lose, and create a manual restore point after all drivers are in. A fresh install is the cleanest the PC will ever be — capture it.
Leave the power plan on Balanced. It is the right answer for almost every PC; the honest power-plan page in this series explains why the other plans are not magic. Then install your everyday apps from their official sites or with winget — never from download-aggregator sites that wrap installers in extra junk.
If you are setting up many PCs, do not repeat this checklist twenty times by hand. Finish one machine perfectly, capture it as a golden image, and deploy that image — consistency is what makes a fleet supportable. The per-PC checklist above becomes the image's build sheet.
Every step of the fresh-install setup — updates, drivers, accounts, privacy, cleanup and optimization — shown live on a real PC.
▶️ Watch Full VideoAbout an hour of your attention, plus update download time. The update rounds are the slow part; the settings passes are minutes each. It is far cheaper than fixing a half-set-up PC later.
After. Updates can change drivers and restart the PC several times, and some updates only appear once earlier ones are in. Apps installed on a moving target are how strange half-broken states happen.
Windows already includes Microsoft Defender, and it activates automatically — including when you remove a bundled trial antivirus. For most home users that is a solid baseline; what matters more is updates, backups and careful downloads.