I have come up with a great idea but need to attached a document (this idea could really bring microsoft to next stage of future technology of the tablet, that would lead the way to another product that will dominate the market place

what if you could design a tablet for your phone to connect via wirelessly or by usb and everything be mirrored from your mobile to your tablet, so you could in theory surf the web on your tablet via your phone and on your tablet access all your apps photos, videos and more. Turning and integrating you see or do on your mobile is mirrored on the tablet. Plug and Play. Both Phone-Tab and your chosen mobile would cast each other in a way that could make two devices as one.

I propose that all remote and sharing programs be installable, but not installed until the user requests the functionality. They should be uninstallable down to the last registry entry and file. This is for single users who who are the superuser.

User should have settings stored, but not files.

Any files that 3rd parties want to install, should be installed into the 'Program files' area. No files or settings should go into the Windows area.

No future Windows version should allow 3rd party apps to access the internet directly.

All application that want to access the internet should go through an artificial intelligence program that monitors for adverse changes to the user environment. A super phishing filter program but more powerful and versatile.

All Windows utilities should be replaced in functionality, by a super utility, that is monitored by an artificial intelligence, for its impact on the user's environment. No more access to dangerous programs such is dism.exe, which can manipulate windows images, that registry is just a viewport for.

Windows images should be made obsolete, and just settings and data stored.

When Windows installs a third party program, it should do so in the 'program files' directory. No files (including dynamic linked libraries dll files) of 3rd parties, would go in the Windows directory.

All necessary files and settings for the user's session would be stored in the 'program files' directory. At the end of the user's session, only their settings and harmless data, would be stored.

The idea of impersonation (SeImpersonatePrivilege) by one user of another, should be abolished. It is dangerous. Impsonation is handy for Microsoft and companies, to remotely set up a person's environment, but should be done in a special session, and not in a working Windows environment.

A clearly defined set of limitations would go with any new user, that can not be accessed or changed, by them. This would eliminate the issue of token keys, which can be copied and used.

Any program that exhibits the ability to directly access the hard disk, through machine code embedded commands, should not be allowed to install in the first place.

All programs should NOT have the ability to directly access the Windows program area of the disk, other than a session that is strictly maintenance mode, which the superuser controls, and is responsible for.

The current firewall has so many holes through it, that I think of it as a sieve. Using procexp64 utility, shows how many processes are up and running not called by the user or the system.

Even with all the group policy settings disabling remote desktop access and the firewall settings to the maximum through gpedit.msc and wf.msc, remote desktop processes are still being called up. Even with the remote desktop executable files removed, the dll files are being remotely called up.

Piggybacking one internet protocol on another, java functionality fully enabled, programs calling other programs using acquired token privileges .... there has to be a better way.

Lately, I have been getting a lot of Taiwanese language functionality; keyboards, textservice conversion etc, being inexplicably installed on the system, for no reason...

I am sure most people are oblivious to the data (and commands)that trickle through their firewall.

In Windows Update on Server 2016 and beyond, there is the Restart options, which allows you to Schedule a time to restart and finish installing updates.

The problem is you can only turn this on once the updates have fully completed installed.

Instead of having to wait for the update to install, you should be allowed to Schedule the Restart time from this menu ONCE YOU HAVE ALREADY BEGUN to install updates. It's very annoying to have to wait for hours or however long, to then later have to go back and schedule the restart. You should be able to set it right away once you begin the install of updates. Perhaps, if the updates fail, then maybe it can be configured to automatically NOT reboot if there's a problem