Advanced Plus Security Brambedkar59's Security Config 2024

[brambedkar59]

I was using just VoodooShield (no AV) on old laptop because not enough CPU power (Intel 7th Gen U-series dual core CPU), but now on new machine I switched to KSC Free.
Also made switch to Win 11, overall decent but still not as stable as Win 10. I only have Home version so really miss the GPedit.msc options.

 

[harlan4096]

To cover some possible KSCF holes (since no Application Control + FW modules), You may try to use Simple Windows Hardening too (by @Andy Ful)

 

[brambedkar59]

I have never used SWH before, trying it now on default settings with both SRH and WH enabled. Do i get pop-ups if something gets blocked? How does it log the blocked apps if it doesn't run in the background?
Do i need to setup any exclusions for Kaspersky so it can run smoothly or not required? On VS I usually set it on "training" mode for a day or two and set my folder exclusions so it can run smoothly with almost no pop-ups.

 

[harlan4096]

About SWH check this link: Q&A - Simple Windows Hardening

I guess no popups, but You can check blocked events...

I think You don't need to create any exclusion...

 

[Gandalf_The_Grey]

About SWH check this link: Q&A - Simple Windows Hardening

I guess no popups, but You can check blocked events...

I think You don't need to create any exclusion...

And have a look at the manual (Simple Windows Hardening - Manual.pdf):

Hard_Configurator/Simple Windows Hardening at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator

github.com

Andy did an excellent job on the documentation

 

[brambedkar59]

@harlan4096 @Gandalf_The_Grey Thank you for the links. Seems straight forward. Hope it doesn't cause any trouble in updating programs, fingers crossed.

Update: added RunBySmartScreen tool as well

 

[SeriousHoax]

I only have Home version so really miss the GPedit.msc options.

You can try this to enable gpedit in Home edition. I never tried it since I'm using Pro but as far as I know it's safe. It just enables the gpedit feature that Microsoft locks away from Windows 10/11 Home version users. Create a system backup before trying, just in case.

How To Enable Group Policy Editor (Gpedit.msc) In Windows 11 Home

Getting an error GPEDIT.MSC not found? Or the group policy editor is missing from your version of Windows 11? Check out our quick solutions to this problem... 3 effective methods to guide you to install and configure Group Policy Editor (GPEdit.msc) in Windows 11 Home edition.

www.itechtics.com

 

[brambedkar59]

You can try this to enable gpedit in Home edition. I never tried it since I'm using Pro but as far as I know it's safe. It just enables the gpedit feature that Microsoft locks away from Windows 10/11 Home version users. Create a system backup before trying, just in case.

How To Enable Group Policy Editor (Gpedit.msc) In Windows 11 Home

Getting an error GPEDIT.MSC not found? Or the group policy editor is missing from your version of Windows 11? Check out our quick solutions to this problem... 3 effective methods to guide you to install and configure Group Policy Editor (GPEdit.msc) in Windows 11 Home edition.

www.itechtics.com

Worked like a charm (created system image with Macrium first)
One thing I noticed, I had to set an exclusion for "Gpedit-Enabler-for-Windows-11.bat" file in SWH before running it otherwise it won't run at all. And I can see an entry in "Blocked events" so now I know where to look in-case something doesn't work right.

 

[Szellem]

Good.

 

[brambedkar59]

Added: Malwarebytes WFC (Medium Filtering + Learning Mode)
Forgot to update the config, using WFC for couple of weeks now.

 

[brambedkar59]

Windows11 Build updated to 22621.1, so many bugs fixed in this build. I can finally say Win11 is ready for daily use.


Used Bitdefender TS for 1 month or two then moved to KSC Free again. Liked BD so far but KSC is lighter. (Browsing is faster on BD if I use default settings in KSC)

Removed:
Simple Windows Hardening by Andy Ful (too many blocks while installing drivers/softwares)
Malwarebytes WFC

Added: Bitdefender VPN

 

[Trooper]

Windows11 Build updated to 22621.1, so many bugs fixed in this build. I can finally say Win11 is ready for daily use.


Used Bitdefender TS for 1 month or two then moved to KSC Free again. Liked BD so far but KSC is lighter. (Browsing is faster on BD if I use default settings in KSC)

Removed:
Simple Windows Hardening by Andy Ful (too many blocks while installing drivers/softwares)
Malwarebytes WFC

Added: Bitdefender VPN

Nice setup. Glad to hear the new build of 11 is more stable. I am looking forward to checking it out when it goes final.

Yeah BD browsing is definitely faster than KSC, unless you tweak it.

Thanks for sharing.

 

[SeriousHoax]

Windows11 Build updated to 22621.1, so many bugs fixed in this build.

Isn't it Windows 11 beta build?

 

[Trooper]

Isn't it Windows 11 beta build?

Yeah it might even be release preview by now.

 

[brambedkar59]

Isn't it Windows 11 beta build?

Yup, it's a beta build. Although as @Trooper mentioned it might be the RTM build.

 

[SeriousHoax]

Now that it has been confirmed as the RTM build, I wanted to know about your experience with it so far. Is it fully stable? Have you noticed any kind of bugs? : Windows 11 - First look

 

[LDogg]

Good config!

~LDogg

 

[brambedkar59]

Now that it has been confirmed as the RTM build, I wanted to know about your experience with it so far. Is it fully stable? Have you noticed any kind of bugs? : Windows 11 - First look

Build 22621.1 is pretty stable, feels snappy as well and seeing no major bugs. Ready for daily use.
Some minor bugs are still there like this, UI takes a sec to load (only see this after a boot or waking after sleep, nothing too serious) and sometimes MS Photos app crashes (not seeing it for last 2 days though, could be fixed in app update).
Edit: Forgot about the Volume/Sound mixer bug, it keeps resetting System sounds to 100% after every Sleep/shutdown/reboot. This bug is on every single Win 11 build I have used so far.

 

[brambedkar59]

Wow Kaspersky is getting jealous. Earlier it wouldn't care about Malwarebytes if you installed it after installing Kaspersky but now it does mind that.

 

[M4RT1NE2]

Bitdefender has the same