Advanced Security oldschool's cheapo laptop configuration

Last updated
Feb 4, 2026
How it's used?
For home and private use
Operating system
Windows 11
Other operating system
Windows Pro
On-device encryption
N/A
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
On
Network firewall
Enabled
About WiFi router
Provided by ISP
Real-time security
Windows Security
Firewall security
Microsoft Defender Firewall
About custom security
MS Defender | Platform & Engine Beta channel updates
Cloud Protection Level - Block
ASR rules
Exploit Protection Settings
Firewall Hardening Tool
Controlled Folder Access - Added Start Menu, Start Menu > Programs, and Quick Launch folders.
RunBySmartscreen

Windows Security - A Github page by a former MT member with links to relevant MS documentation.
Periodic malware scanners
NPE, Sophos Scan & Clean, Eset Online Scanner
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Ungoogled Chromium | Privacy Badger | UBOL* | McAfee Web Advsior | Brave Search | Chrome Web Store
* I use Privacy Badger on all websites and UBOL "On click" via browser's menu access control.

Ungoogled Chromium flags

Firefox | µBO | Brave Search

Edge | µBO | GPC Enabler | Brave Search
Edge flags
Secure DNS
Quad9 DNS
Desktop VPN
None
Password manager
Maintenance tools
Windows built-in
File and Photo backup
Copy/Paste
Subscriptions
    • None
System recovery
Aomei Backupper Pro Lifetime - Primary
Wiindows Backup & Restore- Secondary image backup
Risk factors
    • Browsing to popular websites
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Lenovo L340 Intel(R) Core(TM) i3-8145U CPU @ 2.10GHz 2.30 GHz 16GB RAM 500GB SSD 1TB HDD
Notable changes
22-12-5 Reverted to MS Defender.
23-1-21 Refreshed Windows with SAC in evaluation mode.
23-2-2 Clean Windows installation
23-2-18 SAC user-enabled on
27-2-23 Added Chrome for the lack of 'feature' bloat.
28-2-23 Changed default browser to Chrome
24.2.24 Refreshed Windows and re-enabled Smart App Control
26.2.2 Replaced Chrome with Ungoogled Chromium
26.2.2
9.25 Updated to 25H2 via Enablement package.
5.7.24 Performed a repair installation via Windows Update. Nice & easy!
6.10.24 Updated to 24H2 OS build 26100.1882
10.10.24 Rolled back to 23H2 due to bugs & performance
16.10.24 Added Chrome browser with Privacy Badger
5.1.25 Reset PC and enabled Smart App Control
2.4.26 Ungoogled Chromium as default browser
What I'm looking for?

Looking for minimum feedback.

I still have PS2 and old start menu AFAIK. Maybe due to A/B rollout?
I do not know; I searched for, but I could not find.
It was there when installed Windows (got it disabled).
Capture.JPG
 
  • Like
Reactions: Khushal
Updated to 25H2 via this link. Easy, breezey.
thanks for this, upgraded to 25H2 now waiting for features to roll out:)
 
I already have installed Fort firewall today; but I can uninstall and give Minimal firewall another try; the first time was consuming lots of RAM and glitchy; hope it is more polished now.
It's much improved. I too had issues with the early versions. Not the latest.
 
Do the rule still apply through Windows firewall after exit of Minimal firewall?
Yes. That's the whole point. It's a front-end that doesn't mess with anything else on your system. It only writes rules, let's you view them, view connections, etc.
 
Updated to 25H2 via this link. Easy, breezey.
Does 25H2 have "Administrator Protection" and "Universal Apps Removal" in Windows Security and Group Policy?
 
Does 25H2 have "Administrator Protection" and "Universal Apps Removal" in Windows Security and Group Policy?
NAFAIK. Maybe rolling out later, as usual. No Administrator Protection, but Universal Apps Removal is in Group Policy.
 
Last edited:
NAFAIK. Maybe rolling out later, as usual. No Administrator Protection, but Universal Apps Removal is in Group Policy.
I installed 25H2; both are there, but it appears "Administrator Protection" (Group Policy) requires a higher build to work.
 
  • Like
Reactions: oldschool
Is it the best software for controlling the firewall on Windows?
I'm not going to make that claim because it's very new. But I like that it's simple, portable, etc.. It truly is just a bare-bones front end for WF with a very clean UI. Very easy on the eyes.
 

You may also like...