The Three Places Settings Live¶
Windows keeps its settings in three overlapping tools. Knowing which one holds what saves a lot of clicking.
Settings¶
The modern app. Right-click Start → Settings, or press Win+I.
Holds: Windows Update, Windows Security (the Defender dashboard), Accounts (your own account and adding others), Apps (installed programs), Remote Desktop on/off, Personalization (screen saver and lock screen).
Control Panel¶
The older, deeper tool. Press Win and type Control Panel.
Holds: User Accounts (managing other users' passwords), Programs and Features, Windows Defender Firewall's advanced options, System → Remote settings (Remote Assistance), and Windows Tools, which links to every MMC console.
Microsoft Management Console (MMC)¶
The administrator's toolset. Each tool is a console you open by name. Press Win+R, type the name, press Enter.
| Type | Opens | Used for |
|---|---|---|
secpol.msc |
Local Security Policy | Password policy, lockout, audit policy, user rights, security options |
lusrmgr.msc |
Local Users and Groups | Users, groups, membership, passwords |
services.msc |
Services | Start, stop, enable, disable services |
eventvwr.msc |
Event Viewer | Logs |
gpedit.msc |
Local Group Policy Editor | Everything in secpol plus Administrative Templates |
wf.msc |
Firewall with Advanced Security | Inbound and outbound rules |
taskschd.msc |
Task Scheduler | Scheduled tasks |
compmgmt.msc |
Computer Management | Several of the above in one window, plus Shared Folders |
appwiz.cpl |
Programs and Features | Uninstall programs |
optionalfeatures |
Windows Features | Turn features like SMBv1 and Telnet Client off |
dsa.msc |
Active Directory Users and Computers | Domain accounts (Server 2022 domain controllers) |
gpmc.msc |
Group Policy Management | Domain policies (Server 2022 domain controllers) |
Note
secpol.msc, lusrmgr.msc, and gpedit.msc are not in Windows 11 Home. Competition images are Pro, Enterprise, or Server 2022, so they're present. On a domain controller, lusrmgr.msc won't open at all; domain accounts live in dsa.msc.
When you don't know where something is¶
Press Win and type what you're looking for. "firewall," "user accounts," "event viewer," "remote desktop" all bring up the right tool. Search is faster than remembering paths.
Example¶
The README says to make sure the firewall is on. Three ways to get there:
- Settings → Privacy & security → Windows Security → Firewall & network protection
- Control Panel → System and Security → Windows Defender Firewall
- Win, type
firewall, pick Windows Defender Firewall
All three show the same firewall. Pick whichever you reach first.
Try it¶
- Pick one setting from any later page and find it in all three places: the Settings app, the policy editor, and the registry. Note which one shows the value that actually applies.
- Change the setting in one place and read it back in the other two. Which updates immediately and which waits for
gpupdate /force?
Build it¶
A .bat or .ps1 file that runs reg query for five registry values you care about and prints them with a label. Run it before and after a change; the diff is your evidence.