Securing a Windows 10 laptop

[DELTAprime]

I've got to set up a family members new Windows 10 laptop tonight. They are not savvy and phishing and malware are an issue, not to mention the laptop will be on a public University network. Beyond installing better anti-virus than Defender (probably going to go with Kaspersky) and downgrading the users account to a limited user what else should I do? Thanks.

 

[Nuwan Fernando]

Turn on bit locker on one partition and keep the most important files there.

At the end it really depends on how you operate the Laptop.

 

[FALC0N]

What good would bit locker do? Besides, it's doubtful the laptop has Windows 10 pro.

 

[Nuwan Fernando]

So that when not unlocked, it'll be inaccessible by other programs (viruses) or Users.