As of 13 August 2026, AI can only partly secure a business laptop.

What to actually do

1. Hand it to a person

   The route this page recommends

   A person who owns the outcome does this end to end, worth it when the failure is dear.

2. Use a tool built for this

   Second choice

3. Do it yourself

   The distant third

   A chat interface, chat-fluent skill, and roughly 1 hour until you can act on the result.

   How to actually do it

   1. Open the laptop's system information page and record the operating system, exact version, device owner, administrator status and whether device management or endpoint protection is shown.
   2. Open the relevant company security policy or ask your IT administrator for the required controls, then remove confidential content and paste only the relevant requirements into the prompt.
   3. Paste the prompt and the recorded device details into a chatbot, and ask it to produce the prioritised checklist without supplying passwords, recovery keys, private keys or security tokens.
   4. Give the checklist and any proposed commands to your IT administrator or responsible colleague before changing settings, especially encryption, firewall, administrator access, device management or endpoint protection.
   5. Run only the approved read-only checks first, record the setting names and results, and compare them with the checklist and the company policy.
   6. Apply approved changes one at a time, recording the previous setting and rollback instruction so each change can be reversed if the laptop or business software stops working.
   7. Send the recorded results and unresolved items to your IT administrator, who must confirm device-management status, endpoint protection, encryption, account controls and compliance.

   Prompt

   Help me create a safe security-hardening plan for one business laptop.
   
   Device details:
   - Operating system and exact version: [Windows or macOS and version]
   - Is the laptop owned or managed by my employer: [answer]
   - Is it enrolled in device management or an endpoint security service: [answer or unknown]
   - Is the user account an administrator: [answer or unknown]
   - Company security policy or requirements: [paste relevant text]
   - Problems already observed: [describe or write none]
   
   Do not assume that a setting exists or that a command is safe. Do not ask me to paste passwords, recovery keys, private keys, full personal data, security tokens or confidential business content. Separate advice for Windows and macOS, and say when you need more information. Do not claim that the laptop is secure, compliant or clean from malware.
   
   Produce:
   1. A prioritised checklist of checks and changes, starting with low-risk actions.
   2. For every item, explain why it matters, what could break, how to undo it and whether an IT administrator must approve it.
   3. A list of evidence to collect, such as setting names, screenshots with secrets removed and management status.
   4. Commands or scripts only when necessary, with the exact platform, a dry-run or read-only check first, and a warning before any change-making command.
   5. A final list of items that only my IT administrator or security professional can confirm.
   
   Use only the device details and policy text supplied here. Mark anything unknown instead of guessing. Do not disable security controls, bypass device management, change encryption or firewall settings, or remove software without explicit IT approval.

   Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.