Advanced Plus Security Gandalf_The_Grey's PC Security Config

[ErzCrz]

Added DefenderUI, because:

DefenderUI

defenderui.com

I like DefenderUI. Works well for me

 

[Gandalf_The_Grey]

Which filtering mode do you use with uBlock Origin Lite?

Here are my settings and filters used:

 

[Gandalf_The_Grey]

Trying and liking the new version 7 of Hard_Configurator.
Especially the Update H_C button is very useful when maintaining multiple laptops.
Went back to the stable version of the AdGuard extension, impressed what they are doing with their MV3 (beta) extension:

First ad blocker on MV3: beta version of AdGuard Browser Extension

The first ad blocker compatible with Chrome's Manifest V3 API is now in beta! It has changed a lot since we started developing it. Read on to learn more about this version and the upcoming release.

adguard.com

 

[lokamoka820]

Trying and liking the new version 7 of Hard_Configurator.
Especially the Update H_C button is very useful when maintaining multiple laptops.
Went back to the stable version of the AdGuard extension, impressed what they are doing with their MV3 (beta) extension:

First ad blocker on MV3: beta version of AdGuard Browser Extension

The first ad blocker compatible with Chrome's Manifest V3 API is now in beta! It has changed a lot since we started developing it. Read on to learn more about this version and the upcoming release.

adguard.com

Looks promising compared to uBlock Origin Lite.

 

[Gandalf_The_Grey]

Reinstalled Windows 11 24H2 from ISO (keeping personal files and apps) and now Smart App Control is on.

Changed the AdGuard extension for uBlock Origin Lite (just works a little bit better and smoother).
And Bitdefender TrafficLight for McAfee WebAdvisor, because (if I remember correctly @SeriousHoax said and I saw that recently for myself) it can block only malicious frames on webpages and not the whole webpage.

 

[Gandalf_The_Grey]

Resources used to tweak privacy and security settings:

• GitHub - AndyFul/Hard_Configurator: GUI to Manage Software Restriction Policies and harden Windows Home OS
• Master Tutorial to Make Windows 11 Super Fast on Slow Devices
• GitHub - StellarSand/privacy-settings: Guide to privacy settings for most major softwares and services.
• Harden Windows Security

Not using all, but cherrypicked what I needed or liked.

 

[Dave Russo]

Reinstalled Windows 11 24H2 from ISO (keeping personal files and apps) and now Smart App Control is on.

Changed the AdGuard extension for uBlock Origin Lite (just works a little bit better and smoother).
And Bitdefender TrafficLight for McAfee WebAdvisor, because (if I remember correctly @SeriousHoax said and I saw that recently for myself) it can block only malicious frames on webpages and not the whole webpage.

Does Bitdefender trafficeLight alow you to choose going to a site(it blocks) if you want?

 

[Gandalf_The_Grey]

Does Bitdefender trafficeLight alow you to choose going to a site(it blocks) if you want?

Yes, both (Bitdefender and McAfee) allow you going to a site they block, if you really want that.

 

[Gandalf_The_Grey]

Updated config with Windows 11 Pro 25H2 and DefenderUI 1.44.

 

[SeriousHoax]

Updated config with Windows 11 Pro 25H2 and DefenderUI 1.44.

Were you offered 25H2 automatically?

 

[Gandalf_The_Grey]

Were you offered 25H2 automatically?

No, I did not wait for that with my personal laptop.

 

[Gandalf_The_Grey]

Gandalf_The_Grey's PC Security Config · Setup v2
Updated Oct 1, 2026

What changed

• Periodic malware scanners: Norton Power Eraser and Sophos Scan & Clean → HitmanPro
• Browsers and extensions: Microsoft Edge with uBlock Origin Lite, Consent-O-Matic, Bitwarden, McAfee WebAdvisor as extensions → Microsoft Edge with uBlock Origin Lite, Consent-O-Matic, Bitwarden, Osprey as extensions
• Maintenance tools: Maintenance tools: PrivaZer PRO portable, Disk Cleanup, Optimize Drives, Autoruns.
  Update tools: LG Update & Recovery, UCheck portable, Driver Easy, Intel Driver & Support Assistant. → Maintenance tools: BleachBit, Disk Cleanup, Optimize Drives, Autoruns.
  Update tools: UCheck , Driver Easy.
• Smart App Control: Off → On
• Notable changes: 2022.01.01 new config for the new year.
  2022.01.31 removed Bitsum Process Lasso, Samsung Magician. Switched from DefenderUI Free and VoodooShield to the all-in-one DefenderUI Pro.
  2022.02.12 back to Ziggo Safe Online by F-Secure
  2022.02.16 added Quad9 secure DNS
  2022.03.22 have to use Adobe Reader for work, removed KVRT.
  2022.04.09 trying the AdGuard extension instead of uBlock Origin
  2022.04.10 back to uBlock Origin
  2022.05.01 removed Ziggo Safe Online, back to Microsoft Defender and installed Kerish Doctor
  2022.05.04 installed the latest VoodooShield
  2022.05.13 installed fs protection by F-Secure 18.4 beta 2
  2022.05.20 back to Microsoft Defender Antivirus and Andy's tools
  2022.05.23 changed from ConfigureDefender to DefenderUI
  2022.06.07 back to fs protection and VoodooShield
  2022.07.18 back to Microsoft Defender Antivirus with DefenderUI and VoodooShield
  2022.08.14 reset of Windows 11 and added (back) Simple Windows Hardening
  2022.08.31 small changes because of my new laptop
  2022.09.06 went from uBlock Origin to AdGuard
  2022.09.12 up to date with the latest changes in this form
  2022.09.26 back to FS Protection
  2022.10.23 reset of Windows 11 22H2 and using Microsoft Defender with ConfigureDefender on high
  2022.12.12 filled the new fields and Smart App Control has turned itself off.
  2023.01.01 back to FS Protection and running a trial of NoVirusThanks SysHardener
  2023.01.29 removed NoVirusThanks SysHardener and switched from AdGuard MV3 to uBlock Origin
  2023.03.20 back to Windows buit-in protection configured by Hard_Configurator
  2023.03.15 back to Simple Windows Hardening
  2023.05.19 up to date with the May 2023 Update of this form
  2023.07.05 back to FS Protection
  2023.08.17 testing Windows Hybrid Hardening
  2024.02.02 using Windows Hybrid Hardening Light an added the I don't care about cookies extension
  2024.04.20 removed I don't care about cookies and Bitdefender TrafficLight
  2024.04.20 removed McAfee WebAdvisor
  2024.04.24 changed from uBlock Origin to AdGuard
  2024.06.19 added DefenderUI and switched from AdGuard to uBlock Origin Lite
  2024.07.12 changed to Hard_Configurator and the AdGuard extension.
  2024.10.20 Smart App Control on and uBlock Origin Lite and McAfee WebAdvisor as extensions.
  2025.10.19 App Control Off, due to problems with shortcuts and got Windows 11 25H2. → 2022.01.01 new config for the new year.
  2022.01.31 removed Bitsum Process Lasso, Samsung Magician. Switched from DefenderUI Free and VoodooShield to the all-in-one DefenderUI Pro.
  2022.02.12 back to Ziggo Safe Online by F-Secure
  2022.02.16 added Quad9 secure DNS
  2022.03.22 have to use Adobe Reader for work, removed KVRT.
  2022.04.09 trying the AdGuard extension instead of uBlock Origin
  2022.04.10 back to uBlock Origin
  2022.05.01 removed Ziggo Safe Online, back to Microsoft Defender and installed Kerish Doctor
  2022.05.04 installed the latest VoodooShield
  2022.05.13 installed fs protection by F-Secure 18.4 beta 2
  2022.05.20 back to Microsoft Defender Antivirus and Andy's tools
  2022.05.23 changed from ConfigureDefender to DefenderUI
  2022.06.07 back to fs protection and VoodooShield
  2022.07.18 back to Microsoft Defender Antivirus with DefenderUI and VoodooShield
  2022.08.14 reset of Windows 11 and added (back) Simple Windows Hardening
  2022.08.31 small changes because of my new laptop
  2022.09.06 went from uBlock Origin to AdGuard
  2022.09.12 up to date with the latest changes in this form
  2022.09.26 back to FS Protection
  2022.10.23 reset of Windows 11 22H2 and using Microsoft Defender with ConfigureDefender on high
  2022.12.12 filled the new fields and Smart App Control has turned itself off.
  2023.01.01 back to FS Protection and running a trial of NoVirusThanks SysHardener
  2023.01.29 removed NoVirusThanks SysHardener and switched from AdGuard MV3 to uBlock Origin
  2023.03.20 back to Windows buit-in protection configured by Hard_Configurator
  2023.03.15 back to Simple Windows Hardening
  2023.05.19 up to date with the May 2023 Update of this form
  2023.07.05 back to FS Protection
  2023.08.17 testing Windows Hybrid Hardening
  2024.02.02 using Windows Hybrid Hardening Light an added the I don't care about cookies extension
  2024.04.20 removed I don't care about cookies and Bitdefender TrafficLight
  2024.04.20 removed McAfee WebAdvisor
  2024.04.24 changed from uBlock Origin to AdGuard
  2024.06.19 added DefenderUI and switched from AdGuard to uBlock Origin Lite
  2024.07.12 changed to Hard_Configurator and the AdGuard extension.
  2024.10.20 Smart App Control on and uBlock Origin Lite and McAfee WebAdvisor as extensions.
  2025.10.19 App Control Off, due to problems with shortcuts and got Windows 11 25H2.
  2026.10.01 Trying the DefenderHardeningSuite and config up to date
• Custom security settings: DefenderUI 1.44
  
  Recommended Profile
  
  Windows 11 Pro 25H2
  
  Memory integrity enabled
  
  Resources and tools used to tweak privacy and security settings
  
  Master Tutorial to Make Windows 11 Super Fast on Slow Devices
  GitHub - StellarSand/privacy-settings: Guide to privacy settings for most major software and services.
  O&O ShutUp10++: Free antispy tool for Windows 10 and 11
  DefenderUI - Unlocks the full power of Windows Defender with an intuitive, streamlined interface. → DefenderHardeningSuite with Hardening, ASR/CFA Audit preset and 1 week learning phase
• Computer specs: Gandalf_The_Grey's new LG Gram 16 | MalwareTips
  https://valid.x86.fr/cache/banner/ta9i9h-6.png → Gandalf_The_Grey's new LG Gram 16 | MalwareTips
• OS version and support details: Not specified → Pro (26H2)
• On-device encryption: Older selection — review required → Windows BitLocker / Device Encryption
• Device sign-in security: Older selection — review required → Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
• Two-factor authentication: Not specified → Microsoft Authenticator
• Subscriptions: Older selection — review required → Microsoft 365 Family (up to 1 TB per person)
• Usage and exposure: Older selection — review required → Visiting familiar websites, Visiting unknown or untrusted websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
• Feedback preference: Older selection — review required → Only essential issues, please

Spoiler: Full setup snapshot

My current setup

• Operating system: Windows 11
• Real-time protection: Microsoft Defender Antivirus
• File and photo backups: Windows Backup, OneDrive with Microsoft 365 ransomware protection (always on sync)
• Device firewall: Microsoft Defender Firewall
• Browsers and extensions: Microsoft Edge with uBlock Origin Lite, Consent-O-Matic, Bitwarden, Osprey as extensions
• Main use of this computer: For home and private use
• OS version and support details: Pro (26H2)
• On-device encryption: Windows BitLocker / Device Encryption
• Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Always notify
• Smart App Control: On
• Network firewall: Enabled
• Router and network details: Ziggo SmartWifi modem by Sagemcom
• Custom security settings: DefenderHardeningSuite with Hardening, ASR/CFA Audit preset and 1 week learning phase
• Periodic malware scanners: HitmanPro
• Malware sample testing: I do not participate in malware testing
• Environment for malware testing: None
• Secure DNS: From my ISP (Ziggo)
• Desktop VPN: AdGuard VPN
• Password and passkey manager: Bitwarden browser extension
• Two-factor authentication: Microsoft Authenticator
• Maintenance tools: Maintenance tools: BleachBit, Disk Cleanup, Optimize Drives, Autoruns.
  Update tools: UCheck , Driver Easy.
• Subscriptions: Microsoft 365 Family (up to 1 TB per person)
• System recovery: Windows system image
• Usage and exposure: Visiting familiar websites, Visiting unknown or untrusted websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
• Computer specs: Gandalf_The_Grey's new LG Gram 16 | MalwareTips
• Notable changes: 2022.01.01 new config for the new year.
  2022.01.31 removed Bitsum Process Lasso, Samsung Magician. Switched from DefenderUI Free and VoodooShield to the all-in-one DefenderUI Pro.
  2022.02.12 back to Ziggo Safe Online by F-Secure
  2022.02.16 added Quad9 secure DNS
  2022.03.22 have to use Adobe Reader for work, removed KVRT.
  2022.04.09 trying the AdGuard extension instead of uBlock Origin
  2022.04.10 back to uBlock Origin
  2022.05.01 removed Ziggo Safe Online, back to Microsoft Defender and installed Kerish Doctor
  2022.05.04 installed the latest VoodooShield
  2022.05.13 installed fs protection by F-Secure 18.4 beta 2
  2022.05.20 back to Microsoft Defender Antivirus and Andy's tools
  2022.05.23 changed from ConfigureDefender to DefenderUI
  2022.06.07 back to fs protection and VoodooShield
  2022.07.18 back to Microsoft Defender Antivirus with DefenderUI and VoodooShield
  2022.08.14 reset of Windows 11 and added (back) Simple Windows Hardening
  2022.08.31 small changes because of my new laptop
  2022.09.06 went from uBlock Origin to AdGuard
  2022.09.12 up to date with the latest changes in this form
  2022.09.26 back to FS Protection
  2022.10.23 reset of Windows 11 22H2 and using Microsoft Defender with ConfigureDefender on high
  2022.12.12 filled the new fields and Smart App Control has turned itself off.
  2023.01.01 back to FS Protection and running a trial of NoVirusThanks SysHardener
  2023.01.29 removed NoVirusThanks SysHardener and switched from AdGuard MV3 to uBlock Origin
  2023.03.20 back to Windows buit-in protection configured by Hard_Configurator
  2023.03.15 back to Simple Windows Hardening
  2023.05.19 up to date with the May 2023 Update of this form
  2023.07.05 back to FS Protection
  2023.08.17 testing Windows Hybrid Hardening
  2024.02.02 using Windows Hybrid Hardening Light an added the I don't care about cookies extension
  2024.04.20 removed I don't care about cookies and Bitdefender TrafficLight
  2024.04.20 removed McAfee WebAdvisor
  2024.04.24 changed from uBlock Origin to AdGuard
  2024.06.19 added DefenderUI and switched from AdGuard to uBlock Origin Lite
  2024.07.12 changed to Hard_Configurator and the AdGuard extension.
  2024.10.20 Smart App Control on and uBlock Origin Lite and McAfee WebAdvisor as extensions.
  2025.10.19 App Control Off, due to problems with shortcuts and got Windows 11 25H2.
  2026.10.01 Trying the DefenderHardeningSuite and config up to date
• Feedback preference: Only essential issues, please

Feedback on this setup is welcome.