Advanced Security enaph's PC Security Config

PC Setup Configuration Help & Showcase
6 Replies 742 Views
Notes by Staff Team

  1. This setup configuration does not have a backup plan. We strongly recommend to add a backup solution for your data so that you can restore it in the case of an emergency.
    Backing up allows the recovery of data that has been lost due of a malware attack (eg. ransomware) or a hard disk crash. In such events you might lose family photos, your music collection, documents, or financial data. Backups are fast and simple to perform so it should be done on a regular basis.

Archived configuration (not current) · expand details
Thread details
Last updated
Oct 6, 2026
Main use of this computer
For home and private use
Operating system
Windows 11
OS version and support details
25H2
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
On
Network firewall
Enabled
Router and network details
Ziggo Sagemcom F3896LG
Real-time protection
Microsoft Windows Defender + CyberLock
Device firewall
Microsoft Defender Firewall
Periodic malware scanners
HitmanPro
Malware sample testing
I do not participate in malware testing
Environment for malware testing
- Enables Smart App Control
- Enabled Controlled folder access
- Enabled Core Isolation
- Enabled the following ASR rules:
# Block executable content from email client and webmail
# Block Office applications from creating executable content
# Block Office applications from injecting code into other processes
# Block abuse of exploited vulnerable signed drivers
# Block execution of potentially obfuscated scripts
# Block JavaScript or VBScript from launching downloaded executable content
# Block Office applications from creating child processes
# Block Win32 API calls from Office macro
# Block credential stealing from LSASS
# Block Adobe Reader from creating child processes
# Block persistence through WMI event subscription
# Use advanced protection against ransomware
# Block all Office applications from creating child processes
# Block untrusted and unsigned processes running from USB
# Block executable files from running unless they meet a prevalence, age, or trusted list criterion
Browsers and extensions
Microsoft Edge + 1Password AdGuard Browser Assistent
Secure DNS
AdGuard Private DNS
Desktop VPN
AdGuard VPN
Password and passkey manager
1Password
Two-factor authentication
1Password
Maintenance tools
System built-in tools
File and photo backups
OneDrive
Subscriptions
    • Microsoft 365 Premium
System recovery
System built-in tools
Usage and exposure
    • Visiting familiar websites
    • Making audio/video calls
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
# Lenovo IdeaPad Slim 5 14IMH10

* Processor Options:
- Intel Core Ultra 9 185H (16C / 22T, up to 5.1 GHz, 24MB Cache)
* AI Engine / NPU:
- Intel AI Boost (up to 11 TOPS)
* Graphics:
- Integrated Intel Arc Graphics
* Memory:
- 2x 8GB DDR5-5600 MHz SO-DIMM
* Storage:
- 512GB M.2 PCIe 4.0 x4 NVMe SSD
* Display Options (14.0", 16:10 aspect ratio):
- WUXGA (1920 x 1200) IPS, 300 nits, 60Hz, 45% NTSC, Anti-glare
* Audio & Webcam:
- Stereo speakers, 2W x 2, Dolby Audio
- FHD (1080p) webcam with privacy shutter & dual-array microphones
- IR Camera / ToF sensor for Windows Hello (select models)
* Connectivity:
- Wi-Fi 6 (802.11ax 2x2) / Wi-Fi 6E
- Bluetooth 5.2 / 5.3
* I/O Ports:
- 2x USB-C (USB 10Gbps, USB Power Delivery 3.0, DisplayPort 1.4)
- 1x USB-A (USB 5Gbps, Always On)
- 1x USB-A (USB 5Gbps)
- 1x HDMI
- 1x MicroSD card reader
- 1x 3.5mm Headphone / Microphone combo jack
* Battery & Power:
- Integrated 60Wh battery
- 65W USB-C power adapter (supports Rapid Charge Boost)
* Design & Build:
- Chassis: Aluminum top and bottom
- Dimensions: 313.4 x 222 x 16.9 mm (12.34 x 8.74 x 0.67 inches)
- Weight: Approx. 1.47 kg (3.24 lbs)
- Color: Luna Grey
* Operating System:
- Windows 11 Pro
Feedback preference

Showcase only - no advice requested

Notes by Staff Team

  1. This setup configuration does not have a backup plan. We strongly recommend to add a backup solution for your data so that you can restore it in the case of an emergency.
    Backing up allows the recovery of data that has been lost due of a malware attack (eg. ransomware) or a hard disk crash. In such events you might lose family photos, your music collection, documents, or financial data. Backups are fast and simple to perform so it should be done on a regular basis.

enaph

enaph

Level 30
Verified
Honorary Member
Top Poster
Well-known
Forum Veteran
enaph's PC Security Config · Setup v7
Updated Oct 4, 2026

My current setup
  • Operating system: Windows 11
  • OS version and support details: 25H2
  • Real-time protection: Microsoft Windows Defender + CyberLock
  • File and photo backups: OneDrive
  • Device firewall: Microsoft Defender Firewall
  • Browsers and extensions: Microsoft Edge + 1Password AdGuard Browser Assistent
  • Main use of this computer: For home and private use
  • On-device encryption: Windows BitLocker / Device Encryption
  • Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
  • Security updates: Allow security updates and latest features
  • Update channels: Allow stable updates only
  • User Account Control (UAC): Always notify
  • Smart App Control: On
  • Network firewall: Enabled
  • Router and network details: Ziggo Sagemcom F3896LG
  • Periodic malware scanners: HitmanPro
  • Malware sample testing: I do not participate in malware testing
  • Environment for malware testing: - Enables Smart App Control
    - Enabled Controlled folder access
    - Enabled Core Isolation
    - Enabled the following ASR rules:
    # Block executable content from email client and webmail
    # Block Office applications from creating executable content
    # Block Office applications from injecting code into other processes
    # Block abuse of exploited vulnerable signed drivers
    # Block execution of potentially obfuscated scripts
    # Block JavaScript or VBScript from launching downloaded executable content
    # Block Office applications from creating child processes
    # Block Win32 API calls from Office macro
    # Block credential stealing from LSASS
    # Block Adobe Reader from creating child processes
    # Block persistence through WMI event subscription
    # Use advanced protection against ransomware
    # Block all Office applications from creating child processes
    # Block untrusted and unsigned processes running from USB
    # Block executable files from running unless they meet a prevalence, age, or trusted list criterion
  • Secure DNS: AdGuard Private DNS
  • Desktop VPN: AdGuard VPN
  • Password and passkey manager: 1Password
  • Two-factor authentication: 1Password
  • Maintenance tools: System built-in tools
  • Subscriptions: Microsoft 365 Premium
  • System recovery: System built-in tools
  • Usage and exposure: Visiting familiar websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
  • Computer specs: # Lenovo IdeaPad Slim 5 14IMH10

    * Processor Options:
    - Intel Core Ultra 9 185H (16C / 22T, up to 5.1 GHz, 24MB Cache)
    * AI Engine / NPU:
    - Intel AI Boost (up to 11 TOPS)
    * Graphics:
    - Integrated Intel Arc Graphics
    * Memory:
    - 2x 8GB DDR5-5600 MHz SO-DIMM
    * Storage:
    - 512GB M.2 PCIe 4.0 x4 NVMe SSD
    * Display Options (14.0", 16:10 aspect ratio):
    - WUXGA (1920 x 1200) IPS, 300 nits, 60Hz, 45% NTSC, Anti-glare
    * Audio & Webcam:
    - Stereo speakers, 2W x 2, Dolby Audio
    - FHD (1080p) webcam with privacy shutter & dual-array microphones
    - IR Camera / ToF sensor for Windows Hello (select models)
    * Connectivity:
    - Wi-Fi 6 (802.11ax 2x2) / Wi-Fi 6E
    - Bluetooth 5.2 / 5.3
    * I/O Ports:
    - 2x USB-C (USB 10Gbps, USB Power Delivery 3.0, DisplayPort 1.4)
    - 1x USB-A (USB 5Gbps, Always On)
    - 1x USB-A (USB 5Gbps)
    - 1x HDMI
    - 1x MicroSD card reader
    - 1x 3.5mm Headphone / Microphone combo jack
    * Battery & Power:
    - Integrated 60Wh battery
    - 65W USB-C power adapter (supports Rapid Charge Boost)
    * Design & Build:
    - Chassis: Aluminum top and bottom
    - Dimensions: 313.4 x 222 x 16.9 mm (12.34 x 8.74 x 0.67 inches)
    - Weight: Approx. 1.47 kg (3.24 lbs)
    - Color: Luna Grey
    * Operating System:
    - Windows 11 Pro
  • Feedback preference: Showcase only - no advice requested
Shared as my personal configuration.
 
enaph's PC Security Config · Setup v10
Updated Oct 7, 2026

What changed
  • Custom security settings: Not specified → - Enabled Smart App Control
    - Enabled Controlled folder access
    - Enabled Core Isolation
    - Enabled the following ASR rules:
    # Block executable content from email client and webmail
    # Block Office applications from creating executable content
    # Block Office applications from injecting code into other processes
    # Block abuse of exploited vulnerable signed drivers
    # Block execution of potentially obfuscated scripts
    # Block JavaScript or VBScript from launching downloaded executable content
    # Block Office applications from creating child processes
    # Block Win32 API calls from Office macro
    # Block credential stealing from LSASS
    # Block Adobe Reader from creating child processes
    # Block persistence through WMI event subscription
    # Use advanced protection against ransomware
    # Block all Office applications from creating child processes
    # Block untrusted and unsigned processes running from USB
    # Block executable files from running unless they meet a prevalence, age, or trusted list criterion
My current setup
  • Operating system: Windows 11
  • OS version and support details: 25H2
  • Real-time protection: Microsoft Windows Defender + CyberLock
  • File and photo backups: OneDrive
  • Device firewall: Microsoft Defender Firewall with Advanced Security
  • Browsers and extensions: Microsoft Edge + 1Password AdGuard Browser Assistent
  • Main use of this computer: For home and private use
  • On-device encryption: Windows BitLocker / Device Encryption
  • Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
  • Security updates: Allow security updates and latest features
  • Update channels: Allow stable updates only
  • User Account Control (UAC): Always notify
  • Smart App Control: On
  • Network firewall: Enabled
  • Router and network details: Ziggo Sagemcom F3896LG
  • Custom security settings: - Enabled Smart App Control
    - Enabled Controlled folder access
    - Enabled Core Isolation
    - Enabled the following ASR rules:
    # Block executable content from email client and webmail
    # Block Office applications from creating executable content
    # Block Office applications from injecting code into other processes
    # Block abuse of exploited vulnerable signed drivers
    # Block execution of potentially obfuscated scripts
    # Block JavaScript or VBScript from launching downloaded executable content
    # Block Office applications from creating child processes
    # Block Win32 API calls from Office macro
    # Block credential stealing from LSASS
    # Block Adobe Reader from creating child processes
    # Block persistence through WMI event subscription
    # Use advanced protection against ransomware
    # Block all Office applications from creating child processes
    # Block untrusted and unsigned processes running from USB
    # Block executable files from running unless they meet a prevalence, age, or trusted list criterion
  • Periodic malware scanners: HitmanPro
  • Malware sample testing: I do not participate in malware testing
  • Secure DNS: AdGuard Private DNS
  • Desktop VPN: AdGuard VPN
  • Password and passkey manager: 1Password
  • Two-factor authentication: 1Password
  • Maintenance tools: System built-in tools
  • Subscriptions: Microsoft 365 Premium
  • System recovery: System built-in tools
  • Usage and exposure: Visiting familiar websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
  • Computer specs: # Lenovo IdeaPad Slim 5 14IMH10

    * Processor Options:
    - Intel Core Ultra 9 185H (16C / 22T, up to 5.1 GHz, 24MB Cache)
    * AI Engine / NPU:
    - Intel AI Boost (up to 11 TOPS)
    * Graphics:
    - Integrated Intel Arc Graphics
    * Memory:
    - 2x 8GB DDR5-5600 MHz SO-DIMM
    * Storage:
    - 512GB M.2 PCIe 4.0 x4 NVMe SSD
    * Display Options (14.0", 16:10 aspect ratio):
    - WUXGA (1920 x 1200) IPS, 300 nits, 60Hz, 45% NTSC, Anti-glare
    * Audio & Webcam:
    - Stereo speakers, 2W x 2, Dolby Audio
    - FHD (1080p) webcam with privacy shutter & dual-array microphones
    - IR Camera / ToF sensor for Windows Hello (select models)
    * Connectivity:
    - Wi-Fi 6 (802.11ax 2x2) / Wi-Fi 6E
    - Bluetooth 5.2 / 5.3
    * I/O Ports:
    - 2x USB-C (USB 10Gbps, USB Power Delivery 3.0, DisplayPort 1.4)
    - 1x USB-A (USB 5Gbps, Always On)
    - 1x USB-A (USB 5Gbps)
    - 1x HDMI
    - 1x MicroSD card reader
    - 1x 3.5mm Headphone / Microphone combo jack
    * Battery & Power:
    - Integrated 60Wh battery
    - 65W USB-C power adapter (supports Rapid Charge Boost)
    * Design & Build:
    - Chassis: Aluminum top and bottom
    - Dimensions: 313.4 x 222 x 16.9 mm (12.34 x 8.74 x 0.67 inches)
    - Weight: Approx. 1.47 kg (3.24 lbs)
    - Color: Luna Grey
    * Operating System:
    - Windows 11 Pro
  • Feedback preference: Showcase only - no advice requested
Shared as my personal configuration.
 
enaph's PC Security Config · Setup v11
Updated Oct 11, 2026

What changed
  • Browsers and extensions: Microsoft Edge + 1Password AdGuard Browser Assistent → Microsoft Edge + 1Password + uBOL
  • Secure DNS: AdGuard Private DNS → ControlD
  • Desktop VPN: AdGuard VPN → Windscribe
My current setup
  • Operating system: Windows 11
  • OS version and support details: 25H2
  • Real-time protection: Microsoft Windows Defender + CyberLock
  • File and photo backups: OneDrive
  • Device firewall: Microsoft Defender Firewall with Advanced Security
  • Browsers and extensions: Microsoft Edge + 1Password + uBOL
  • Main use of this computer: For home and private use
  • On-device encryption: Windows BitLocker / Device Encryption
  • Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
  • Security updates: Allow security updates and latest features
  • Update channels: Allow stable updates only
  • User Account Control (UAC): Always notify
  • Smart App Control: On
  • Network firewall: Enabled
  • Router and network details: Ziggo Sagemcom F3896LG
  • Custom security settings: - Enabled Smart App Control
    - Enabled Controlled folder access
    - Enabled Core Isolation
    - Enabled the following ASR rules:
    # Block executable content from email client and webmail
    # Block Office applications from creating executable content
    # Block Office applications from injecting code into other processes
    # Block abuse of exploited vulnerable signed drivers
    # Block execution of potentially obfuscated scripts
    # Block JavaScript or VBScript from launching downloaded executable content
    # Block Office applications from creating child processes
    # Block Win32 API calls from Office macro
    # Block credential stealing from LSASS
    # Block Adobe Reader from creating child processes
    # Block persistence through WMI event subscription
    # Use advanced protection against ransomware
    # Block all Office applications from creating child processes
    # Block untrusted and unsigned processes running from USB
    # Block executable files from running unless they meet a prevalence, age, or trusted list criterion
  • Periodic malware scanners: HitmanPro
  • Malware sample testing: I do not participate in malware testing
  • Secure DNS: ControlD
  • Desktop VPN: Windscribe
  • Password and passkey manager: 1Password
  • Two-factor authentication: 1Password
  • Maintenance tools: System built-in tools
  • Subscriptions: Microsoft 365 Premium
  • System recovery: System built-in tools
  • Usage and exposure: Visiting familiar websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
  • Computer specs: # Lenovo IdeaPad Slim 5 14IMH10

    * Processor Options:
    - Intel Core Ultra 9 185H (16C / 22T, up to 5.1 GHz, 24MB Cache)
    * AI Engine / NPU:
    - Intel AI Boost (up to 11 TOPS)
    * Graphics:
    - Integrated Intel Arc Graphics
    * Memory:
    - 2x 8GB DDR5-5600 MHz SO-DIMM
    * Storage:
    - 512GB M.2 PCIe 4.0 x4 NVMe SSD
    * Display Options (14.0", 16:10 aspect ratio):
    - WUXGA (1920 x 1200) IPS, 300 nits, 60Hz, 45% NTSC, Anti-glare
    * Audio & Webcam:
    - Stereo speakers, 2W x 2, Dolby Audio
    - FHD (1080p) webcam with privacy shutter & dual-array microphones
    - IR Camera / ToF sensor for Windows Hello (select models)
    * Connectivity:
    - Wi-Fi 6 (802.11ax 2x2) / Wi-Fi 6E
    - Bluetooth 5.2 / 5.3
    * I/O Ports:
    - 2x USB-C (USB 10Gbps, USB Power Delivery 3.0, DisplayPort 1.4)
    - 1x USB-A (USB 5Gbps, Always On)
    - 1x USB-A (USB 5Gbps)
    - 1x HDMI
    - 1x MicroSD card reader
    - 1x 3.5mm Headphone / Microphone combo jack
    * Battery & Power:
    - Integrated 60Wh battery
    - 65W USB-C power adapter (supports Rapid Charge Boost)
    * Design & Build:
    - Chassis: Aluminum top and bottom
    - Dimensions: 313.4 x 222 x 16.9 mm (12.34 x 8.74 x 0.67 inches)
    - Weight: Approx. 1.47 kg (3.24 lbs)
    - Color: Luna Grey
    * Operating System:
    - Windows 11 Pro
  • Feedback preference: Showcase only - no advice requested
Shared as my personal configuration.
 
enaph's PC Security Config · Setup v12
Updated Oct 15, 2026

What changed
  • OS version and support details: 25H2 → 26H2
My current setup
  • Operating system: Windows 11
  • OS version and support details: 26H2
  • Real-time protection: Microsoft Windows Defender + CyberLock
  • File and photo backups: OneDrive
  • Device firewall: Microsoft Defender Firewall with Advanced Security
  • Browsers and extensions: Microsoft Edge + 1Password + uBOL
  • Main use of this computer: For home and private use
  • On-device encryption: Windows BitLocker / Device Encryption
  • Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
  • Security updates: Allow security updates and latest features
  • Update channels: Allow stable updates only
  • User Account Control (UAC): Always notify
  • Smart App Control: On
  • Network firewall: Enabled
  • Router and network details: Ziggo Sagemcom F3896LG
  • Custom security settings: - Enabled Smart App Control
    - Enabled Controlled folder access
    - Enabled Core Isolation
    - Enabled the following ASR rules:
    # Block executable content from email client and webmail
    # Block Office applications from creating executable content
    # Block Office applications from injecting code into other processes
    # Block abuse of exploited vulnerable signed drivers
    # Block execution of potentially obfuscated scripts
    # Block JavaScript or VBScript from launching downloaded executable content
    # Block Office applications from creating child processes
    # Block Win32 API calls from Office macro
    # Block credential stealing from LSASS
    # Block Adobe Reader from creating child processes
    # Block persistence through WMI event subscription
    # Use advanced protection against ransomware
    # Block all Office applications from creating child processes
    # Block untrusted and unsigned processes running from USB
    # Block executable files from running unless they meet a prevalence, age, or trusted list criterion
  • Periodic malware scanners: HitmanPro
  • Malware sample testing: I do not participate in malware testing
  • Secure DNS: ControlD
  • Desktop VPN: Windscribe
  • Password and passkey manager: 1Password
  • Two-factor authentication: 1Password
  • Maintenance tools: System built-in tools
  • Subscriptions: Microsoft 365 Premium
  • System recovery: System built-in tools
  • Usage and exposure: Visiting familiar websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
  • Computer specs: # Lenovo IdeaPad Slim 5 14IMH10

    * Processor Options:
    - Intel Core Ultra 9 185H (16C / 22T, up to 5.1 GHz, 24MB Cache)
    * AI Engine / NPU:
    - Intel AI Boost (up to 11 TOPS)
    * Graphics:
    - Integrated Intel Arc Graphics
    * Memory:
    - 2x 8GB DDR5-5600 MHz SO-DIMM
    * Storage:
    - 512GB M.2 PCIe 4.0 x4 NVMe SSD
    * Display Options (14.0", 16:10 aspect ratio):
    - WUXGA (1920 x 1200) IPS, 300 nits, 60Hz, 45% NTSC, Anti-glare
    * Audio & Webcam:
    - Stereo speakers, 2W x 2, Dolby Audio
    - FHD (1080p) webcam with privacy shutter & dual-array microphones
    - IR Camera / ToF sensor for Windows Hello (select models)
    * Connectivity:
    - Wi-Fi 6 (802.11ax 2x2) / Wi-Fi 6E
    - Bluetooth 5.2 / 5.3
    * I/O Ports:
    - 2x USB-C (USB 10Gbps, USB Power Delivery 3.0, DisplayPort 1.4)
    - 1x USB-A (USB 5Gbps, Always On)
    - 1x USB-A (USB 5Gbps)
    - 1x HDMI
    - 1x MicroSD card reader
    - 1x 3.5mm Headphone / Microphone combo jack
    * Battery & Power:
    - Integrated 60Wh battery
    - 65W USB-C power adapter (supports Rapid Charge Boost)
    * Design & Build:
    - Chassis: Aluminum top and bottom
    - Dimensions: 313.4 x 222 x 16.9 mm (12.34 x 8.74 x 0.67 inches)
    - Weight: Approx. 1.47 kg (3.24 lbs)
    - Color: Luna Grey
    * Operating System:
    - Windows 11 Pro
  • Feedback preference: Showcase only - no advice requested
Shared as my personal configuration.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top