Advanced Plus Security Divine_Barakah's Second Laptop Security Config

[Sorrento]

When I did a Windows install recently on a friends laptop, installing Windows wasn't overly long, installing new updates, adding his bookmarks, setting browser settings! AV, etc did take a long time & he still had to install office & set office up (not quick) after I left, if these people don't do images occasionality i no longer help them its that simple, as my time is still valuable.

Full C:\ 48 seconds, takes a few mins on my £280 laptop but still fast.

 

[Parkinsond]

installing Windows wasn't overly long

Tip for faster W install, use ventoy to install directly from ISO on HDD, not ISO on usb memory with ventoy installed on.

install office

From offline source, it takes less than 2 min.

 

[Sorrento]

You are usually limited by the processor speed/RAM of the PC in installing & Windows updates & the download speed to install updates, on this PC I haven’t had a need to reinstall for over 3 years thanks to imaging, on the recent reinstall of a friend sorting updates took well over over half an hour, that’s on a gig download - However: if you can install Windows in 15 mins & install Office & set-it up in 3, etc I really take my hat off to you I really must be doing all things wrong.

I don't intend to cause offence ever, though i may do that without realising, if I do that to anyone i apologise! ..

 

[Parkinsond]

You are usually limited by the processor speed/RAM of the PC in installing & Windows updates

I tried installing W one time from ISO on usb memory containing ventory, and one more time using the usb memory containing ventory but from ISO on HDD; there is a significant difference in duration.
Of course if bundled with a better cpu and ram, it will be even faster.

if you can install Windows in 15 mins & install Office & set-it up in 3, etc I really take my hat off to you I really must be doing all things wrong

W install from HDD ISO: approx 7 min; Office install from offline ISO: approx 75 sec.

 

[Parkinsond]

I don't intend to cause offence ever

Your are one of the kindest and most polite members

 

[Divine_Barakah]

It has been a very busy day.

I installed Windows 11 Enterprise IoT LTSC and made hudge changes.

-Blocked driver updates in Windows Updates using GP. I rely on Lenovo Vantage Commercial.
- Deferred security updates for 14 days to avoid catastrophes similar to the one I expereinced because of Jan update
- Deferred quality for 1 month.
- Sat Windows Updates to notify of check and download of updates using GP.

- Installed EIS instead of TMMS.

 

[Parkinsond]

It has been a very busy day.

I installed Windows 11 Enterprise IoT LTSC and made hudge changes.

-Blocked driver updates in Windows Updates using GP. I rely on Lenovo Vantage Commercial.
- Deferred security updates for 14 days to avoid catastrophes similar to the one I expereinced because of Jan update
- Deferred quality for 1 month.
- Sat Windows Updates to notify of check and download of updates using GP.

- Installed EIS instead of TMMS.

Congratulations for the fresh install.
I have installed freshly today too.
But I have found four files never seen them before.

Spoiler: Files

Do you know what are those files?

 

[Divine_Barakah]

Congratulations for the fresh install.
I have installed freshly today too.
But I have found four files never seen them before.

Spoiler: Files

View attachment 295431View attachment 295432

Do you know what are those files?

This SDK is used by many things including MD interface. Some open source utilities use it too

 

[Parkinsond]

This SDK is used by many things including MD interface

Grateful for your instructions; I was going to uninstall

 

[Divine_Barakah]

Grateful for your instructions; I was going to uninstall

I know what you're doing. You're provoking Windows so that it misbehaves. That way you can reinstall Windows again hahahahah

 

[Parkinsond]

I know what you're doing. You're provoking Windows so that it misbehaves. That way you can reinstall Windows again hahahahah

Naughty user

 

[Victor M]

install directly from ISO on HDD, not ISO on usb memory with ventoy installed on.

I don't understand what you are saying. U first install Ventoy onto a USB stick correct?

 

[Parkinsond]

I don't understand what you are saying. U first install Ventoy onto a USB stick correct?

Correct; it creates a small 32 MB FAT partition for the app install, then you have two options:
1- Add whatever you like of ISO files on the remaining partition (could be formatted as NTFS, exFAT, or FAT), in addition to any files you need to store on the usb memory.
2- Keep the ISO files stored on the HDD, and use Ventoy to install Windows or Linux right from there.
The second option has two advantages:
a- Larger storage space than the usb memory
b- Faster read speed from HDD than the usb memory

 

[Divine_Barakah]

I installed DuckDuckGo browser.

 

[Parkinsond]

Night Eye has been my favorite dark mode extension for quite a while now. It does a better job of transforming websites than the others I tried.

It's a polished product.

I'm comparing it with dark reader on several websites; it provides better color conversion compared to dark reader.

 

[RetiredOldMan]

Night Eye has been my favorite dark mode extension for quite a while now. It does a better job of transforming websites than the others I tried.

It's a polished product.

I've been using the Pro Version of Night Eye on both of my Mac's for several years now and it works very well with Safari, Firefox and Chrome. No complaints.

 

[Divine_Barakah]

Removed Windows 11 Enterprise IOT LTSC and now I am back to Windows 11 Pro 25H2.

Now I am using Panda Dome Essential.

 

[Divine_Barakah]

Updating drivers

 

[Divine_Barakah]

Panda Application Control in action.



Once you allow the app, it gets whitlested. I sat Application Control to "Ask" for unknown applications.


One more point. After running a full system scan followed by a system restart, the system as snappy as it could ever be.

 

[Divine_Barakah]

Panda Application Control also warned about Waterfox installer. This is a good sign. Panda does not automatically trust digitally signed apps.