*note, I would never use windows 10* I begin disabling all the various tracking/telemetry services Diable auto-updates, only manual updates. Create another non-administrator account to use as main account. Set UAC to require the admin account password for admin tasks. Then I would do what @BuddhasTorch recommended. I only use windows for games. I stick with windows 7/8.1 (8.1 only after heavy deletion of tracking/spyware services)