Windows 11 Business PC Health Checklist

Use this checklist to review the health of Windows 11 business PCs. Work through each section in order. Any area rated Needs Attention should be addressed before a slow or unsupported PC creates a support problem.

The IT Club Windows Principle

A good business PC should be: Supported → Patched → Secured → Standardised → Managed → Fast enough → Boring.

Windows

• □ Windows 11 installed on a current, supported feature release
• □ Device is on the General Availability Channel — not Insider or Preview builds
• □ No end-of-life Windows version in active business use (Windows 10 without ESU is unsupported from October 2025)

Hardware

• □ RAM adequate for the workload (IT Club recommends 16 GB for general business use in 2026)
• □ SSD storage — not a spinning hard drive
• □ Storage capacity healthy — adequate free space remaining
• □ In warranty, or replacement planned
• □ Windows 11 hardware requirements met: TPM 2.0, Secure Boot capable

Patching and Updates

• □ All current security updates applied
• □ No failed Windows Update entries unresolved
• □ Restart policy appropriate for working hours
• □ Driver and firmware update process understood and followed
• □ Update compliance visible through Windows Update for Business or Intune reporting

Security

• □ Microsoft Defender or approved EDR solution healthy and up to date
• □ BitLocker enabled on devices that leave the office
• □ Secure Boot active
• □ TPM present and enabled
• □ Standard user accounts used — not local administrator accounts — where appropriate

Performance

• □ RAM utilisation reviewed under typical working load
• □ SSD with adequate free space (near-full storage slows performance)
• □ Startup applications reviewed — unnecessary items disabled (Settings → Apps → Startup)
• □ Browser tab, extension and application load reviewed
• □ Unnecessary software identified and removed through supported methods

Management

• □ Devices enrolled in Microsoft Intune or equivalent MDM
• □ Entra ID joined where appropriate
• □ Standard application set deployed consistently across the estate
• □ Standard security and configuration policies applied
• □ Consistent build — all managed devices behave the same way

Startup Applications

• □ Startup applications reviewed: Settings → Apps → Startup
• □ High-impact startup items assessed and unnecessary ones disabled
• □ Startup application behaviour controlled through policy where appropriate

Applications

• □ No manufacturer trialware remaining
• □ No duplicate utilities in active use
• □ No unsupported or end-of-life software in use
• □ Application licensing current and audited
• □ Browser extensions reviewed — unnecessary or unmanaged extensions removed

User Experience

• □ Unnecessary Windows notifications reviewed
• □ OneDrive configured appropriately for the organisation
• □ Windows Search functioning correctly
• □ No persistent user complaints left unresolved
• □ Staff can access files, applications and Settings without IT assistance for standard tasks

Replacement Planning

• □ Device age and remaining useful life assessed
• □ Replacement date recorded and visible to IT
• □ Windows 11 lifecycle for current feature version noted
• □ Devices approaching end-of-warranty flagged for review
• □ Replacement specification documented for next procurement