Capstone: Setting Up a Personal Windows 11 Workstation

Eleven chapters, one system. This capstone walks a single, real workstation setup end to end — a fresh Windows 11 install for a hypothetical freelance developer, "Priya," setting up a new personal machine — deliberately touching every prior chapter in the order a genuine setup would actually hit them, rather than revisiting each one in isolation.

The Scenario

Priya has a newly built PC (fresh from Build a New Development PC 11's own first-boot BIOS visit) and wants it fully set up for daily development work, with reasonable security, without spending an entire weekend on it.

Step 1 — Confirming the Machine Can Actually Install Windows 11

Before running the installer, Priya reboots into the BIOS/UEFI screen and explicitly enables both TPM (listed as "Intel PTT" on this particular motherboard) and Secure Boot — Chapter 2's own warning that these often ship disabled by default, even on hardware that otherwise fully supports Windows 11. A clean install from bootable USB follows, avoiding any leftover configuration from testing the hardware.

Step 2 — The Account Decision

Priya chooses a Microsoft account during OOBE — deliberately, for the OneDrive integration (Chapter 3) and cross-device Windows Hello (Chapter 4) it enables, accepting Chapter 2's own trade-off of handing over more data by default in exchange for that convenience.

Step 3 — Locking Down the Account Properly

Following Chapter 4's own least-privilege guidance (the same principle Database Security 3 teaches for database accounts), Priya creates a second, separate local administrator account and switches her daily-use Microsoft account to standard. Windows Hello is set up immediately after — a PIN first, then facial recognition, both backed by the same TPM enabled in Step 1.

Step 4 — Software, the Right Way for Each Tool

Per Chapter 6's own compare-table, Priya installs her everyday apps (browser, messaging) through the Microsoft Store for their sandboxed, auto-updating benefit, and her development tools (a code editor, Git, a database client) via winget — scripted in one batch rather than clicked through individually:

Step 5 — Networking & Sharing

Connecting to home Wi-Fi, Priya confirms the network profile is set to Private, not Public — Chapter 7's own most commonly cited real-world mistake — specifically so file sharing with another household PC works without a silent, unexplained failure.

Step 6 — Update Discipline & Storage

Chapter 8's own Storage Sense is enabled with a conservative Recycle Bin/downloads retention window, and Active Hours are set to match Priya's actual working schedule, so a feature update never forces a reboot mid-task.

Step 7 — Security, Confirmed Rather Than Assumed

Priya opens the Windows Security app directly (Chapter 9) to confirm Device Encryption activated automatically from the Microsoft account sign-in in Step 2 — exactly the silent activation Chapter 9 warned to check for rather than assume — and saves the recovery key to her Microsoft account, per Cryptography Fundamentals 11's own key-backup discipline.

Step 8 — One Real Script

Chapter 10's own Execution Policy material comes up directly: a small PowerShell script Priya wrote to back up her project folder to an external drive fails on first run with the exact "running scripts is disabled" error. Set-ExecutionPolicy RemoteSigned resolves it — the real, recommended middle ground Chapter 10 named, not Unrestricted.

Step 9 — The Small Habits

Clipboard history (Chapter 11) is enabled, with the habit of clearing it after copying anything sensitive already in place. Two virtual desktops are set up — one for client work, one for personal projects — each using Snap Layouts independently, exactly as Chapter 11 described the two features working together rather than competing.

Hands-On Exercises