Advanced Security Azriel's Security Config 2022

Last updated
Aug 15, 2022
About
Personal, primary device
Additional PC users
Not shared with other users
Desktop OS
Windows 11
OS edition
Home
Login security
    • Password-less (PIN, Biometric, Face)
    • Password (Aa-Zz, 0-9, Symbols)
Primary sign-in
Microsoft account
Primary user
Admin user - Full permissions
Security updates
Automatic - allow all types of updates
Windows UAC
Maximum - always notify
Network firewall
ISP-issued router
Real-time protection
Windows Defender
Simple Windows Hardening
Software firewall
Microsoft Defender Firewall
Custom RTP, Firewall and OS settings
Configure Defender:
Preset | HIGH
Cloud Protection Level | Block
CPU Load while scanning | 10%
Block executables files unless they meet Trusted Criteria | Warn
Block process from PsExec and WMI | Warn
Simple Windows Hardening: Default
Network Profile: Public
Defender: Sandboxed in Appcontainer
Edge: Max Anti-Exploit
DEP: Enable for All Programs
Svchost Hardening
LSA Hardening
Router:
Disable WPS
Malware testing
No malware samples
Periodic security scanners
NPE
Secure DNS
Google
VPN
None
Password manager
Bitwarden
2FA: Microsoft Authenticator
Browsers, Search and Addons
Browser:
Edge
Search:
Google
Addons:
Bitwarden
AdGuard AdBlocker
FastForward
Grammarly
Settings:
Enhance your security on the web | Strict
Enable Appcontainer for renderer process
Enable Appcontainer for Audio process
Enable Appcontainer for Network process
Automatic HTTPS | Always
Maintenance and Cleaning
Updater: Winget
Archiver: Bandizip
Personal Files & Photos backup
Filen
FreeFileSync
Personal backup routine
Automatic (scheduled)
Device recovery & backup
None
Device backup routine
None
PC activity
  1. Browsing the web. 
  2. Browsing to unknown sites. 
  3. Emails. 
  4. Shopping. 
  5. Banking. 
  6. Downloading software. 
  7. File sharing and torrents. 
  8. PC and cloud gaming. 
  9. Multimedia. 
  10. Streaming. 
Computer specs
HP Pavilion - 15-au104nv
Personal changelog
2022-03-27:
Replaced Mega with Filen
Replaced PatchMyPC with Winget
Removed Comodo Firewall
Added Simple Windows Hardening
Added Firewall Hardening

2022-04-08:
Removed Firewall Hardening
Chage Simple Windows Hardening Settings: Paranoid Extensions
Replaced Cloudflare with Quad9
Added Mandatory ASLR
Added Svchost Hardening
Added File History

2022-08-15:
Change Simple Windows Hardening Settings: Default
Removed Mandatory ASLR
Replaced File History with FreeFileSync
Replaced Quad9 with Google
Removed Macrium Reflect Free
Enable LSA Hardening
Changed to Home Edition
Feedback Response

General feedback

Azriel

Level 2
Thread author
Jan 3, 2019
73
I believe your device does not support Windows 11 officially, right? Are you experiencing any issues?
No, it's not. I haven't had any issues except for software that integrates or interacts with windows core files and processes. (Drivers, Registry).
Only Avast and Driver Updaters have accomplished to Crash my Laptop.
 

Lament

Level 3
Apr 25, 2022
130
No, it's not. I haven't had any issues except for software that integrates or interacts with windows core files and processes. (Drivers, Registry).
Only Avast and Driver Updaters have accomplished to Crash my Laptop.
So for now on a production machine, it is safer to stick to Windows 10 if our device does not officially support Windows 11.
 

Azriel

Level 2
Thread author
Jan 3, 2019
73
For me everything is supported, only my CPU is one generation behind the supported one. It has the features Microsoft requires but Microsoft choose not to support it. 🤷‍♂️
 
  • Like
Reactions: Lament