thank you both for the welcome.
i think i have win 11 bolted down, user account password protected with the admin account enabled and password protected.
which is similar to sudo in Ubuntu.
about 44 services disabled and locked down AVG internet security and windows defender as backup.
hardware firewall on the 4 port powered switch backed up with a software fire in AVG.
still working on a few things but will find my way along using this forum and its help files.
Windows 11 doesn't seem to bad apart from one or two things, co-pilot which is now disabled.
so thanks again for the welcome. Steve ..