Microsoft Windows

Microsoft Windows-based workstations have the benefit of letting you configure the operating system with security restrictions.

Turn On Data Execution Prevention

Data Execution Prevention (DEP) prevents code from running in memory locations that are marked as non-executable. See the Microsoft product documentation library at https://learn.microsoft.com/en-us/ for more information and instructions.

Turn Off AutoPlay

AutoPlay automatically performs an action when a new device or media is connected or inserted. This feature provides no value for POS clients and leaving it on poses unnecessary risk. See the Microsoft product documentation library at https://learn.microsoft.com/en-us/ for instructions.

Turn Off Remote Assistance

Remote Assistance (also known as Quick Assist in Microsoft Windows 11) enables remote assistance and screen sharing, allowing someone to remotely view and control a device. This feature provides no value for POS clients.

See the Microsoft product documentation library at https://learn.microsoft.com/en-us/ for instructions.

Apply Security Updates

Microsoft Windows security updates are regularly released on the second Tuesday of each month, but also out-of-band security updates are also possible for critical security vulnerabilities. Apply security updates as soon as they are released by Microsoft. See https://learn.microsoft.com/en-us/ for more information.