My plan for my own work install of Windows 11. Any problems that you see

Lautermilch

Member
Joined
Sep 16, 2024
Messages
1
I've been working for a company for about five months from home and things are well. I installed their web based and other programs on my Dell.
Today I was notified they want to install a 3rd party app for support that will need admin access.

In my Dell I have a number of drives so I plan to:
1. Installed Windows 11 with the same serial number on a different drive.
2. Encrypt the private folders on other drives from my personal copy of Windows 11 in case they are trying to access them.

Anything else I should do?
 
Solution
It's great that you're being proactive about your privacy and security while working from home. Your plan shows a strong awareness of the potential risks involved. Here are a few additional recommendations to ensure your setup is as secure as possible:

Additional Security Measures​

  1. Backup Important Data:
    • Before making any major changes, back up your important data to an external drive or a secure cloud service. This will help ensure you don't lose anything critical if something goes wrong.
  2. Create Separate User Accounts:
    • Set up a standard user account for your work-related tasks and an admin account for personal use. This way, you can limit access to your personal files and settings.
    ...
Sort by date Sort by votes
It's great that you're being proactive about your privacy and security while working from home. Your plan shows a strong awareness of the potential risks involved. Here are a few additional recommendations to ensure your setup is as secure as possible:

Additional Security Measures​

  1. Backup Important Data:
    • Before making any major changes, back up your important data to an external drive or a secure cloud service. This will help ensure you don't lose anything critical if something goes wrong.
  2. Create Separate User Accounts:
    • Set up a standard user account for your work-related tasks and an admin account for personal use. This way, you can limit access to your personal files and settings.
  3. Utilize BitLocker or Other Encryption Tools:
    • If you're using Windows 11 Pro or higher, consider using BitLocker to encrypt your entire drive. This offers an extra layer of security for all your data.
  4. Firewall & Antivirus:
    • Ensure that your firewall is enabled and that you have a good antivirus program running on both installations of Windows. Keeping your systems updated is crucial in defending against threats.
  5. Review Software Access Permissions:
    • When the support app is installed, review what permissions it requests. Ensure it’s necessary for your job and doesn’t require access to personal files or settings.
  6. Disable Sharing:
    • Turn off file and printer sharing options on your work installation to prevent potential unwanted access from the company’s software or network.
  7. Evaluate Network Security:
    • Ensure your home network is secure. This includes using a strong password for your Wi-Fi and possibly hiding the network SSID if there are multiple devices in your vicinity.
  8. Separate Drives:
    • Since you mentioned having multiple drives, consider keeping your work-related files on one drive and your personal files on another to maintain clear separation.
  9. Regular Updates:
    • Keep both versions of Windows up to date with the latest security patches. This applies to any third-party applications as well.
  10. Privacy Settings Review:
    • Make sure you review and adjust privacy settings in Windows 11 to control what data is shared with Microsoft and other applications.

      Conclusion​

      It looks like you're on the right track with your preparations. Implementing these additional measures can help further safeguard your personal data while complying with your company's requirements. Staying vigilant and proactive about security will really pay off in the long run. If you have any further questions or updates, feel free to share!
 
Upvote 0 Downvote
Solution
I would make sure you have approval to do the install from your IT department in case you run into any obstacles. Welcome to the forum btw. You could Bitlocker encrypt the personal drive, but if the device is managed by your organization, its possible they would have access to the Bitlocker keys.
 
Upvote 0 Downvote
You must log in or register to reply here.