Recent changes
Nov 25, 2020
Device priority
Primary device
Operating system
Windows 10
Sign-in account
Sign in with Microsoft ID
Log-in security
    • Windows Hello PIN
Account permissions
Standard account
Security updates
Automatically allow security and feature updates
Windows UAC
Always notify
Malware samples
No - Malware samples are not purposely downloaded
Real-time Malware protection
Microsoft Defender
Firewall protection
Microsoft Defender Firewall
RTP configuration
ConfigureDefender High setting
Hard_Configurator 'recommended settings'
Windows Firewall Control
Quad9 DNS on router

Disable Macros, Add-ins etc - set in all Office products for each user
Periodic scanners
Emsisoft Emergency Kit
VPN and Privacy
ProtonVPN free
Browser(s) and Add-ons
Browser = Edge Chromium
Add-ons:
uBlock Origin in "Lazy Medium" mode (Medium mode plus add NOOP exception for some Top Level Domains)
Bitdefender TrafficLight
Bitwarden
Maintenance tools
None
Photos and Files backup
OneDrive
Monthly backup to external USB (kept disconnected)
File backup schedule
Changes are automatically sync'd to my cloud storage provider
Backup and rollback
System image with Macrium Reflect
Backup schedule
Backups are automatically scheduled by my backup program
Activity usage
  1. Generic web browsing
  2. Checking web mail and emails
  3. Shopping
  4. Financial and sensitive documents
  5. Working from home
  6. Office software and video conferencing
  7. Streaming audio and video content from the Internet
Computer hardware
Older Surface laptop
i7-7600U CPU
GPU inbuilt
16G RAM (not sure on type)
256 GB SSD
Your changelog
25/11/2020- Added Quad9 DNS to router after seeing discussion of third party DNS
21/11/2020b - Changed ConfigureDefender from MAX to High setting
21/11/2020 - Uninstalled Tinywall and installed Windows Firewall Control
20/11/2020 - Installed Tiny Wall
19/11/2020 - Configured uBlock in Medium mode with some NOOP commands. Uninstalled noScript, HTTPS everywhere, Privacy Badger extensions
19/11/2020 - Installed Macrium Reflect for system backup, Bitwarden for password management
Nov 2020 - Installed Hard_Configurator. Applied H_C recommended, ConfigureDefender MAX and firewall settings for H_C users

Gandalf_The_Grey

Level 38
Verified
Trusted
Content Creator
While all those extension are great: noScript, HTTPS everywhere, Privacy Badger, Bitdefender Trafficlight.
You could loose some if you invest time in the blocking modes of uBlock Origin:
 

rndmblk

Level 1
@rndmblk:

In Backup and RollBack, You may add a full Image System BackUp solution: Macrium Reflect Free or AOEMI Backupper, both are free and reliable.

A PassWord Manager would be welcome also.

Please kindly reflect Your changes editing Your config, and announcing them here, thanks for sharing :)
Thanks @harlan4096. I've implemented both suggestions with Macrium Reflect Free for system backup and Bitwarden as Password Manager.

While all those extension are great: noScript, HTTPS everywhere, Privacy Badger, Bitdefender Trafficlight.
You could loose some if you invest time in the blocking modes of uBlock Origin:
Thanks @Gandalf_The_Grey - I'll have a look through both links. Reducing the number of extensions while maintaining protection sounds good.

Nice to see another Windows internal security build (y)

With Edge you can also take a look at my guide for isolate your surfing against shopping: Edge - Chromium-Edge "3-Browser-Profiles" Solution
This will increase your privacy and also can use better hardening in default profile without loosing comfort in banking profile :cool:
Thanks @security123 - I'll read through your guide
 

rndmblk

Level 1
After reading about uBlock medium mode and some of the configs others are using I enabled uBlock Medium with NOOP filters for the main 'English speaking' TLDs. I removed noScript, HTTPS everywhere and Privacy Badger as I believe most of the functionality may be in uBlock Medium mode.

I'll see how the recent changes go with a mind to creating different Edge profiles. Don't want to introduce too many changes at once :)
 

LDogg

Level 33
Verified
Extensions:
- definitely keep Bitdefender Trafficlight, fantastic browser addon for security, even works seamlessly when using DDG search engine
- done the correct thing removing them 3 for uBlock in Medium Mode

Firewall:
- think about applying a better way to control Windows Fw, off the bat if you don't know how to configure it's like cellophane wrapped on your computer, if you like notifications I would suggest using Malwarebytes Windows Firewall Control, or straight forward setup and forget w/out notifications is Tinywall, but make sure you setup the "Change mode" to Autolearn first (providing you know your computer is clean) and open up all important software that you use on a daily/monthly basis, or you will encounter problems

VPN (optional):
- for free feel free to use ProtonVPN or Windscribe, pros and cons are debated on both xD

PW Manager:
- Bitwarden, only one to recommend and its 100% FREE

Backup:
- I certainly can't hesitate enough to have more than one way to backup, you have cloud covered, maybe add something like Macrium Reflect as previous stated in other comments to backup straight to a HD or other removal drive

Everything else to me looks covered.

~LDogg
 

rndmblk

Level 1
Thanks @LDogg

Firewall - I'll have a look at both of your suggestions. My initial gut feel is that 'set and forget' might win out!

VPN - I have to admit I've not really ever used one (apart from on my work PC where it's required to work from home)

PW Manager - Glad I chose a good one. I think it was a poll here on MT that pointed me to it.

Backup - Good point, I've added Macrium Reflect. I'm trying it with one of their default setups: I think it's Full once a month, differential once a week and incremental once a day. All to an external drive.

Edit: I've installed Tinywall. I put it in learning mode and started all the apps I use regularly then put it in normal mode.
Edit2: I've replaced Tinywall with Windows Firewall Control. I tried both and just prefer WFC for some reason, maybe the layout
 
Last edited:

rndmblk

Level 1
I dropped my ConfigureDefender setting from MAX down to High. I found that I was getting more notifications than I prefer and I believe High is still a considerable improvement over the default settings. I'm just trying to find that balance between security and convenience/minimum number of notifications.
 

Gandalf_The_Grey

Level 38
Verified
Trusted
Content Creator
I dropped my ConfigureDefender setting from MAX down to High. I found that I was getting more notifications than I prefer and I believe High is still a considerable improvement over the default settings. I'm just trying to find that balance between security and convenience/minimum number of notifications.
High is the best balance between security and usability.
 

Andy Ful

Level 65
Verified
Trusted
Content Creator
It is good to read the FAQ from @askalan's website and General Help (<General Help> button in H_C's main window). The H_C may require also some learning:
Helpfiles - Hard_Configurator (hard-configurator.com)
The H_C manual is also available via <General Help><DOCUMENTATION> from the H_C application.

Some H_C users on MT prefer the Basic_Recommended_Settings that are less restrictive (allowed EXE and MSI files, restricted scripting and other file types). But, this can depend on installed software and user habits. The more restrictive settings, the more whitelisting will be required.
Be safe. (y)