by Crawford Computer Consulting
Bookmark

Routine Maintenance on Windows Computers

I believe in running periodic preventive maintenance on them. Here is a basic check-list for the maintenance of these computers:

Checks that can be run automatically (read-only):

  1. Check Windows version and support status (Windows 10 support ended October 2025; check Windows 11 eligibility).
  2. Check OS drive space and disk health (SMART status).
  3. Check RAM, CPU, Disk and Processes in taskmgr.exe.
  4. Review Reliability Monitor (perfmon /rel) and Event Viewer for recent critical errors.
  5. Check Windows Update status and pending updates.
  6. Check Antivirus status and definitions, review quarantine.
  7. Check Firewall status.
  8. Check Network type (Private, Public, Domain) & sharing.
  9. Review Programs and Features: appwiz.cpl. Check for and update unique applications on the computer, if any.
  10. Review startup items: Task Manager Startup tab, the Startup Groups (%AppData%\Microsoft\Windows\Start Menu\Programs\Startup and %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup), and the Run registry keys (HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run).
  11. Check for old or unauthorized user accounts.
  12. Check System Restore: sysdm.cpl, System Protection; and rstrui.exe.
  13. Check BitLocker status and that the recovery key is saved.
  14. Check Remote Desktop and any remote access software.
  15. Check hardware driver and BIOS versions.
  16. Check E-mail store size, if applicable, and that any Outlook .pst/.ost files are backed up, usually here: %homepath%\appdata\local\microsoft\outlook
  17. Check the backup method: Is it working? Is it backing up everything it should?
  18. Laptops: check battery health with powercfg /batteryreport.
  19. Check system file integrity with sfc /scannow and DISM /Online /Cleanup-Image /RestoreHealth.

Manual steps:

  1. Create a restore point before making changes.
  2. Clean up temporary disk files by running cleanmgr.exe or Storage Sense (remove System Files as well), and delete the temporary files in %SYSTEMROOT%\TEMP and %TEMP%.
  3. Check for browser updates, rogue extensions, toolbars, search-providers.
  4. Check for Microsoft 365 (Office) updates.
  5. Watch for any indication of malware, adware, virus, etc. Scan and remove accordingly.
  6. Test the backup by restoring a file.
  7. Back up the BitLocker recovery key (Microsoft account or printed copy).
  8. Turn off Remote Desktop unless it is in use.
  9. Turn off IPv6 unless you use it.
  10. Check System notifications and privacy settings notifications.
  11. Start settings (Under Personalization): Turn off “Show recommendations for tips …”
  12. Lock screen settings (Under Personalization), Personalize your lock screen: Set to Picture and uncheck “Get fun facts”.
  13. Run Windows Updates (Under Advanced Options, Enable “Receive updates for other Microsoft products”).
  14. Update hardware drivers and BIOS if needed.
  15. Make sure important accounts use multi-factor authentication (MFA).
  16. Reboot.