Basic Security cmlew Laptop Security Config 2019

Last updated
Mar 1, 2019
Windows Edition
Home
Security updates
Allow security updates and latest features
User Access Control
Always notify
Real-time security
Window Defender
Firewall security
Microsoft Defender Firewall
Periodic malware scanners
EEK Portable
Malware sample testing
I do not participate in malware testing
Browser(s) and extensions
Chrome,
Edge,
Adguard for Desktop & Extension
Maintenance tools
None, all software manually update every first week of the month.
File and Photo backup
Window Back-up and recovery
pCloud
Dropbox
System recovery
Window Back-up and recovery
Boot thumbdrive
Risk factors
    • Gaming
    • Logging into my bank account
    • Browsing to popular websites
    • Streaming audio/video content from shady sites
    • Browsing to unknown / untrusted / shady sites
    • Working from home
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
FX504GD-E4335T

Processor
Intel® Core™ i7 8750HQ Processor,

Operating System
Windows 10 Home

Chipset
Intel® HM370 Express Chipsets

Memory
8 GB

Display
15.6" (16:9) LED backlit FHD (1920x1080) 60Hz Anti-Glare Panel with 45% NTSC with 178˚ wide angle display Graphic
NVIDIA GeForce GTX 1050 , with 4GB GDDR5 VRAM

Storage
Hard Drives:
1TB 5400RPM SATA HDD
Solid State Drives:
128GB PCIE Gen3 SSD
@CMLew :
  • I would harden WD config with Hard_COnfiguratol Tools (@Andy Ful) or NVT SysHardener and/or NVT OSA.
  • As for "Disk Imaging Backup", You may add Macrium Reflect Free or AOEMI Backupper, both are free and reliable. About W10 Backup system there are many complaints about it is broken in 1809...
  • As for "Virus and Malware Removal Tools", You may add: ZAM Free & HitMan.Pro Free.
  • A PassWord Manager would be welcome also.
Please kindly reflect Your changes editing Your config, and announcing them here, hanks for sharing :giggle:
 
If you are using MS Office on SUA and choose SysHardener, then you have to use something else for hardening MS Office applications (there is no such a problem on Admin account).
The best choice for the home users is not using MS Office at all (except the free mobile versions which run in AppContainer and block the document active content).
 
Last edited:
I'd say 3 and half layers are covered here:
  • Firewall: Default
  • Backup: various solutions
  • Web browser: Adguard
  • Realtime & other: Window Defender

My advice:
  • Use Configure Defender alongside WD
  • Add second opinion scanners like Zemana & Malwarebytes
  • Could add Scriptsafe extension to Chrome
  • Add Emsisoft Browser Extension to Chrome
  • As you're only looking to harden windows, add Syshardener and Configure Defender to help you achieve this

Hope this all helps you, have a good day and thanks for sharing.

~LDogg
 
If you are using MS Office on SUA and choose SysHardener, then you have to use something else for hardening MS Office applications (there is no such a problem on Admin account).
The best choice for the home users is not using MS Office at all (except the free mobile versions which run in AppContainer and block the document active content).

I don't use MsOffice. I use LibreOffice instead.
 
  • Like
Reactions: Andy Ful
I'd say 3 and half layers are covered here:
  • Firewall: Default
  • Backup: various solutions
  • Web browser: Adguard
  • Realtime & other: Window Defender
My advice:
  • Use Configure Defender alongside WD
  • Add second opinion scanners like Zemana & Malwarebytes
  • Could add Scriptsafe extension to Chrome
  • Add Emsisoft Browser Extension to Chrome
  • As you're only looking to harden windows, add Syshardener and Configure Defender to help you achieve this
Hope this all helps you, have a good day and thanks for sharing.

~LDogg

Im using SysHardener to harden window actually. I already do have 2nd opinion scanner, EEK though in USB-Based.
Im trying to run extension-free for Browser (Adguard, is the only exception).
 
  • Like
Reactions: harlan4096
@CMLew :
  • I would harden WD config with Hard_COnfiguratol Tools (@Andy Ful) or NVT SysHardener and/or NVT OSA.
  • As for "Disk Imaging Backup", You may add Macrium Reflect Free or AOEMI Backupper, both are free and reliable. About W10 Backup system there are many complaints about it is broken in 1809...
  • As for "Virus and Malware Removal Tools", You may add: ZAM Free & HitMan.Pro Free.
  • A PassWord Manager would be welcome also.
Please kindly reflect Your changes editing Your config, and announcing them here, hanks for sharing :giggle:

Thanks fr advice.
I heard about the issues on W10 Backup System. Which is why Im planning to shift to AOMEI backupper by end of the mth.
I do harden the window with Syshardener.
I already have EEK for malware removal tool.
I prefer something hardcopy for the passwords saves instead.