Advanced Plus Security Brahman's Home PC configuration 2026

PC Setup Configuration Help & Showcase
7 Replies 1,593 Views
Last updated
Sep 1, 2026
Main use of this computer
For home and private use
Operating system
Windows 11
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Off
Network firewall
Enabled
Router and network details
Mikrotik hAP be lite is my new wifi 7 router
Real-time protection
1. Kaspersky Premium
2. Nextdns doh with Adguard Home with hagezi's local lists
3. Keyscrambler premium
4. Ublock origin lite on all browsers.
Device firewall
Other - Internet Security (3rd-party)
Custom security settings
1. Kaspersky premium with
a) Protected Folders implemented on all hard disks.
b) Turned off " trust digitally signed applications"
c) Https filtering is turned on ( as i do not use adguard for windows anymore)
d) Blocked port 853 UDP and TCP traffic in through Firewall>packet rules.
e) Disabled Ftp on random ports. Enabled auto blocking port scanning applications and ip.
f) Port 53 traffic blocked, dns queries will only go through Adguard Home.
2. Windows Hardening done.
a) Enabled password protected admin.
b) Attack Surface Reduction Rules enabled even though it does not work while Kaspersky is on.
c) remote desktop disabled.
d) HVCI Enabled ( with platform security level " secure boot and DMA protection" virtualization with " enabled with UEFI lock" and Credential guard is enabled with uefi lock.
3. Keyscrambler for encrypting keyboard inputs.
4. Adguard Home as windows service mode at system level for doh enforcement with my own spam filter and hagezi's local blocklist
Periodic malware scanners
1.SophosScanAndClean.
2. EEK.
3. ADW.
Malware sample testing
I do not participate in malware testing
Environment for malware testing
NA
Browsers and extensions
1. Edge ( not used)
2. Vivaldi.

Extensions :
1. Bitwarden
2. Ublock origin.
Secure DNS
Nextdns DOH
Desktop VPN
Always on Cloudflare Zero trust VPN with Cloudflare One client (Cloudflare 50 seat free zero trust account)
Password and passkey manager
Bitwarden with TOTP enabled. Passkeys on supported websites.
Proton as a backup.
File and photo backups
1. NAS
2. Basic Ondrive, mega and google drive.
Subscriptions
    • None
System recovery
1. Veeam windows agent configured to save to NAS.
2. Windows Image backup on a local HDD ( monthly)
Usage and exposure
    • Visiting familiar websites
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
1. Amd Ryzen 5 3600.
2. 2x16 Gb DDR 4 @3200Mhz.
3. Asus tuff gaming X570 Motherboard
4. Zotac Gtx 1660 super 6Gb Vram
5. 2x 512 Gb NVME Gen4 SSD XPG gamix, 8TB HGST HDD, 2x 2 TB Thosiba HDD.
Notable changes
1. Removed Yogadns app since the subscription expired.
2. Added Adguard Home with custom local lists.
3. Added Cloudflare Zerotrust VPN
Feedback preference

Suggestions on the main improvements

Brahman

Brahman

Level 20
Verified
Top Poster
Well-known
Forum Veteran
Hi all, I've reinstalled windows after a very very long time. updated to windows 11 Enterprise 25H2. The main change i have made is to remove Adguard windows from my system. It didn't made any sense to keep it as most of its uses were covers by other apps i use and with the new version it was making the regular browsing so slow. So after so many years of uninterrupted use adguard is off. Hope i have include almost all changes made to my system.
 
Brahman said:
Hi all, I've reinstalled windows after a very very long time. updated to windows 11 Enterprise 25H2. The main change i have made is to remove Adguard windows from my system. It didn't made any sense to keep it as most of its uses were covers by other apps i use and with the new version it was making the regular browsing so slow. So after so many years of uninterrupted use adguard is off. Hope i have include almost all changes made to my system.
Click to expand...
Hey Brahman,

Sounds like a solid refresh on your setup—Windows 11 Enterprise 25H2 is a nice choice for stability and features. Dropping AdGuard makes sense if it was bogging things down and you've got overlaps with other tools. Out of curiosity, what apps are you leaning on now for ad-blocking and browsing protection? Always good to hear how folks streamline their configs.

If you've got a full list of changes, feel free to share more details—might spark some ideas for others here.

Cheers!
 
When tried to install Ulaa (downloaded from the official website) months ago, it was stopped by K free, flagging it as malware, with reverting changes after removal.

Parkinsond

Solved Thread 'Kaspersky labels Ulaa browser as Trojan'

I have download Ulaa browser (by Zoho, a famous Indian company) from the official website: Ulaa - Private, Secure, and Superfast Browser
Scan by Kaspersky revealed no threats, and reputation check of KSN revealed a trusted, signed file.

Double clicked the installer (no running as admin) started the install process, which was interrupted by K; system watcher reported detected suspicious activity and detection of a trojan.
It asked to terminated the process, and I agreed.
It then asked to quarantine files, rollback changes, and restart to perform deep disinfection; again, I agreed...
 
Parkinsond said:
When tried to install Ulaa (downloaded from the official website) months ago, it was stopped by K free, flagging it as malware, with reverting changes after removal.

Parkinsond

Solved Thread 'Kaspersky labels Ulaa browser as Trojan'

I have download Ulaa browser (by Zoho, a famous Indian company) from the official website: Ulaa - Private, Secure, and Superfast Browser
Scan by Kaspersky revealed no threats, and reputation check of KSN revealed a trusted, signed file.

Double clicked the installer (no running as admin) started the install process, which was interrupted by K; system watcher reported detected suspicious activity and detection of a trojan.
It asked to terminated the process, and I agreed.
It then asked to quarantine files, rollback changes, and restart to perform deep disinfection; again, I agreed...
Click to expand...
Ulaa is still not used by many. It's still a niche category browser and it has some quarks such as not getting updated automatically and the issues with K and other similar avs. But the company behind it is trusted and it's not a trojan or a malware, the detection is a false positives. You can safely install it.
 
What Changed:
1. Removed Yogadns app since subscription is over and i can't run it as a service anymore without a subscription.
2. Added Adguard home and enabled it a windows service, nextdns doh is enabled. Local lists with my own list which blocks spam and malware C&C servers and it updates every 2 hours.
3. Added Cloudflare Zerotrust VPN ( a 50 seat free option from cloudflare)to prevent SNI leak and DPI protection from ISP.

My blocklist: Phishing Blocklist (https://idealism4261.github.io/phishing-blocklist/phishing.txt), It is a supplement block list to hagezi's tiff and ultimate list. It removes whats already in hagezi's tiff full and ultimate lists, and only adds what is not included in it.
2026-09-21 17.29.43 idealism4261.github.io 5787a92b1fa4.png
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Continue exploring the conversation.

Back
Top