Advanced Plus Security  (From forum thread)Brahman's Home PC configuration 2026

Current configurationWindows 11
Version 3Updated
7 replies
Community rating Not rated yet View setup
Detailed suggestions and alternatives welcomeWhat changed
Staff assessment Advanced Plus Security· From forum thread

Taken from the forum thread's label. The reviewer and date were not recorded, and staff have not re-checked it against the current setup.

What do the levels mean? Assessment history

Device & operating system

, 4 answers
Operating system
Windows 11
OS version and support details
windows 11 26H2
Main use of this computer
For home and private use
Usage and exposure
Visiting familiar websites, Visiting unknown or untrusted websites, Working from home, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions

Protection & updates

, 14 answers
Real-time protection
Kaspersky Premium, Nextdns doh with Adguard Home with hagezi's local lists,Keyscrambler premium, Ublock origin lite on all browsers. Cloudflare Zero trust VPN.
Device firewall
Other - Internet Security (3rd-party)
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Off
Network firewall
Enabled
Router and network details
Mikrotik hAp Be-Light with stateful Layer 7 firewall rules.
Custom security settings
1. Kaspersky premium with
a) Protected Folders implemented on all hard disks.
b) Turned off " trust digitally signed applications"
c) Https filtering is turned on ( as i do not use adguard for windows anymore)
d) Blocked port 853 UDP and TCP traffic in through Firewall>packet rules.
e) Disabled Ftp on random ports. Enabled auto blocking port scanning applications and ip.
f) Port 53 traffic blocked, dns queries will only go through Adguard Home.
2. Windows Hardening done.
a) Enabled password protected admin.
b) Attack Surface Reduction Rules enabled even though it does not work while Kaspersky is on.
c) remote desktop disabled.
d) HVCI Enabled ( with platform security level " secure boot and DMA protection" virtualization with " enabled with UEFI lock" and Credential guard is enabled with uefi lock.
3. Keyscrambler for encrypting keyboard inputs.
4. Adguard Home as windows service mode at system level for doh enforcement with my own spam filter and hagezi's local blocklist
Periodic malware scanners
EEk, Sophos scan and clean and ADW
Malware sample testing
I do not participate in malware testing
Environment for malware testing
no malware testing

Browsing, accounts & privacy

, 5 answers
Browsers and extensions
Edge and Vivaldi
Secure DNS
Nextdns in doh mode with Hagezi Multi PRO++
Desktop VPN
Cloudflare Zerotrust VPN
Password and passkey manager
Bitwarden ( Proton pass as backup)
Two-factor authentication
Authy

Backup & recovery

, 2 answers
File and photo backups
NAS and Basic Ondrive, mega and google drive.
System recovery
Windows base Image backup on two external hdds and NAS, Veeam agent on windows 11

Apps, specs & notes

, 4 answers
Maintenance tools
windows default
Subscriptions
None
Computer specs
1. Amd Ryzen 5 3600.
2. 2x16 Gb DDR 4 @3200Mhz.
3. Asus tuff gaming X570 Motherboard
4. Zotac Gtx 1660 super 6Gb Vram
5. 2x 512 Gb NVME Gen4 SSD XPG gamix, 8TB HGST HDD, 2x 2 TB Thosiba HDD.
Feedback preference
Detailed suggestions and alternatives welcome
Community rating

Community rating

How members rate the shared configuration. This is community feedback, not a security test.

Not rated yet
An open invitation for useful feedback.

Sign in to rate this setup

Go to discussion

Shared by the member. This is a configuration record, not a device scan.

One of 211 member setups in the Security Setup Hub. Browse setupsGet yours checked

Older thread fields from Oct 12, 2025 (not current) · expand details
Thread details
Last updated
Sep 1, 2026
Main use of this computer
For home and private use
Operating system
Windows 11
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Off
Network firewall
Enabled
Router and network details
Mikrotik hAP be lite is my new wifi 7 router
Real-time protection
1. Kaspersky Premium
2. Nextdns doh with Adguard Home with hagezi's local lists
3. Keyscrambler premium
4. Ublock origin lite on all browsers.
Device firewall
Other - Internet Security (3rd-party)
Custom security settings
1. Kaspersky premium with
a) Protected Folders implemented on all hard disks.
b) Turned off " trust digitally signed applications"
c) Https filtering is turned on ( as i do not use adguard for windows anymore)
d) Blocked port 853 UDP and TCP traffic in through Firewall>packet rules.
e) Disabled Ftp on random ports. Enabled auto blocking port scanning applications and ip.
f) Port 53 traffic blocked, dns queries will only go through Adguard Home.
2. Windows Hardening done.
a) Enabled password protected admin.
b) Attack Surface Reduction Rules enabled even though it does not work while Kaspersky is on.
c) remote desktop disabled.
d) HVCI Enabled ( with platform security level " secure boot and DMA protection" virtualization with " enabled with UEFI lock" and Credential guard is enabled with uefi lock.
3. Keyscrambler for encrypting keyboard inputs.
4. Adguard Home as windows service mode at system level for doh enforcement with my own spam filter and hagezi's local blocklist
Periodic malware scanners
1.SophosScanAndClean.
2. EEK.
3. ADW.
Malware sample testing
I do not participate in malware testing
Environment for malware testing
NA
Browsers and extensions
1. Edge ( not used)
2. Vivaldi.

Extensions :
1. Bitwarden
2. Ublock origin.
Secure DNS
Nextdns DOH
Desktop VPN
Always on Cloudflare Zero trust VPN with Cloudflare One client (Cloudflare 50 seat free zero trust account)
Password and passkey manager
Bitwarden with TOTP enabled. Passkeys on supported websites.
Proton as a backup.
File and photo backups
1. NAS
2. Basic Ondrive, mega and google drive.
Subscriptions
    • None
System recovery
1. Veeam windows agent configured to save to NAS.
2. Windows Image backup on a local HDD ( monthly)
Usage and exposure
    • Visiting familiar websites
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
1. Amd Ryzen 5 3600.
2. 2x16 Gb DDR 4 @3200Mhz.
3. Asus tuff gaming X570 Motherboard
4. Zotac Gtx 1660 super 6Gb Vram
5. 2x 512 Gb NVME Gen4 SSD XPG gamix, 8TB HGST HDD, 2x 2 TB Thosiba HDD.
Notable changes
1. Removed Yogadns app since the subscription expired.
2. Added Adguard Home with custom local lists.
3. Added Cloudflare Zerotrust VPN
Feedback preference

Suggestions on the main improvements

Brahman

Brahman

Level 21
Verified
Top Poster
Well-known
Forum Veteran
Setup PC setup
Original discussion post View current setup
Hi all, I've reinstalled windows after a very very long time. updated to windows 11 Enterprise 25H2. The main change i have made is to remove Adguard windows from my system. It didn't made any sense to keep it as most of its uses were covers by other apps i use and with the new version it was making the regular browsing so slow. So after so many years of uninterrupted use adguard is off. Hope i have include almost all changes made to my system.
 
Brahman said:
Hi all, I've reinstalled windows after a very very long time. updated to windows 11 Enterprise 25H2. The main change i have made is to remove Adguard windows from my system. It didn't made any sense to keep it as most of its uses were covers by other apps i use and with the new version it was making the regular browsing so slow. So after so many years of uninterrupted use adguard is off. Hope i have include almost all changes made to my system.
Click to expand...
Hey Brahman,

Sounds like a solid refresh on your setup—Windows 11 Enterprise 25H2 is a nice choice for stability and features. Dropping AdGuard makes sense if it was bogging things down and you've got overlaps with other tools. Out of curiosity, what apps are you leaning on now for ad-blocking and browsing protection? Always good to hear how folks streamline their configs.

If you've got a full list of changes, feel free to share more details—might spark some ideas for others here.

Cheers!
 
When tried to install Ulaa (downloaded from the official website) months ago, it was stopped by K free, flagging it as malware, with reverting changes after removal.

AFEH

Solved Thread 'Kaspersky labels Ulaa browser as Trojan'

I have download Ulaa browser (by Zoho, a famous Indian company) from the official website: Ulaa - Private, Secure, and Superfast Browser
Scan by Kaspersky revealed no threats, and reputation check of KSN revealed a trusted, signed file.

Double clicked the installer (no running as admin) started the install process, which was interrupted by K; system watcher reported detected suspicious activity and detection of a trojan.
It asked to terminated the process, and I agreed.
It then asked to quarantine files, rollback changes, and restart to perform deep disinfection; again, I agreed...
 
From the setup owner View current setup
Parkinsond said:
When tried to install Ulaa (downloaded from the official website) months ago, it was stopped by K free, flagging it as malware, with reverting changes after removal.

AFEH

Solved Thread 'Kaspersky labels Ulaa browser as Trojan'

I have download Ulaa browser (by Zoho, a famous Indian company) from the official website: Ulaa - Private, Secure, and Superfast Browser
Scan by Kaspersky revealed no threats, and reputation check of KSN revealed a trusted, signed file.

Double clicked the installer (no running as admin) started the install process, which was interrupted by K; system watcher reported detected suspicious activity and detection of a trojan.
It asked to terminated the process, and I agreed.
It then asked to quarantine files, rollback changes, and restart to perform deep disinfection; again, I agreed...
Click to expand...
Ulaa is still not used by many. It's still a niche category browser and it has some quarks such as not getting updated automatically and the issues with K and other similar avs. But the company behind it is trusted and it's not a trojan or a malware, the detection is a false positives. You can safely install it.
 
From the setup owner View current setup
What Changed:
1. Removed Yogadns app since subscription is over and i can't run it as a service anymore without a subscription.
2. Added Adguard home and enabled it a windows service, nextdns doh is enabled. Local lists with my own list which blocks spam and malware C&C servers and it updates every 2 hours.
3. Added Cloudflare Zerotrust VPN ( a 50 seat free option from cloudflare)to prevent SNI leak and DPI protection from ISP.

My blocklist: Phishing Blocklist (https://idealism4261.github.io/phishing-blocklist/phishing.txt), It is a supplement block list to hagezi's tiff and ultimate list. It removes whats already in hagezi's tiff full and ultimate lists, and only adds what is not included in it.
2026-09-21 17.29.43 idealism4261.github.io 5787a92b1fa4.png
 

Join the discussion

Write your reply below. You'll create a free account or log in before it's posted.

Create account Log in

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top