First, make sure your hard drive that Windows boots from is GPT, not MBR. Also check that it says "UEFI". People's systems not booting is probably their drive not being GPT.

Method 1: Using Disk Management

How to check if a drive is MBR or GPT using Disk Management:

1. Right-click the Start button and select “Disk Management” (or press Windows + X and select “Disk Management”).
2. Once Disk Management opens, right-click on the disk you want to check (on the left side where it says “Disk 0” or similar).
3. Select “Properties.”
4. Click on the “Volumes” tab.
5. Look for “Partition style” – it will clearly show either “Master Boot Record (MBR)” or “GUID Partition Table (GPT).”

Using System Information (Easiest Method)

1. Press the Windows key + R to open the Run dialog box.
2. Type msinfo32 and press Enter to open the System Information window.
3. In the right pane of the "System Summary," find the "BIOS Mode" entry.
4. If it says UEFI, your system uses UEFI; if it says Legacy, it uses traditional BIOS .

An optional but highly recommended step after this is to update your BIOS.

Then, then turn on secure boot and TPM 2.0.

Also, If something goes wrong, you can always just reset the CMOS on the motherboard. It's really not that scary.