Advanced Security oldschool's cheapo laptop configuration

Last updated
Feb 4, 2026
How it's used?
For home and private use
Operating system
Windows 11
Other operating system
Windows Pro
On-device encryption
N/A
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
On
Network firewall
Enabled
About WiFi router
Provided by ISP
Real-time security
Windows Security
Firewall security
Microsoft Defender Firewall
About custom security
MS Defender | Platform & Engine Beta channel updates
Cloud Protection Level - Block
ASR rules
Exploit Protection Settings
Firewall Hardening Tool
Controlled Folder Access - Added Start Menu, Start Menu > Programs, and Quick Launch folders.
RunBySmartscreen

Windows Security - A Github page by a former MT member with links to relevant MS documentation.
Periodic malware scanners
NPE, Sophos Scan & Clean, Eset Online Scanner
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browser(s) and extensions
Ungoogled Chromium | Privacy Badger | UBOL* | McAfee Web Advsior | Brave Search | Chrome Web Store
* I use Privacy Badger on all websites and UBOL "On click" via browser's menu access control.
Ungoogled Chromium flags

Firefox | µBO | Brave Search

Edge | µBO | GPC Enabler | Brave Search
Edge flags
Secure DNS
Quad9 DNS
Desktop VPN
None
Password manager
Little black book + brain.exe + GRC's Password Haystacks: How Well Hidden is Your Needle?
Maintenance tools
Windows built-in
File and Photo backup
Copy/Paste
Subscriptions
    • None
System recovery
Aomei Backupper Pro Lifetime - Primary
Wiindows Backup & Restore- Secondary image backup
Risk factors
    • Browsing to popular websites
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Lenovo L340 Intel(R) Core(TM) i3-8145U CPU @ 2.10GHz 2.30 GHz 16GB RAM 500GB SSD 1TB HDD
Notable changes
22-12-5 Reverted to MS Defender.
23-1-21 Refreshed Windows with SAC in evaluation mode.
23-2-2 Clean Windows installation
23-2-18 SAC user-enabled on
27-2-23 Added Chrome for the lack of 'feature' bloat.
28-2-23 Changed default browser to Chrome
24.2.24 Refreshed Windows and re-enabled Smart App Control
26.2.2 Replaced Chrome with Ungoogled Chromium
26.2.2
9.25 Updated to 25H2 via Enablement package.
5.7.24 Performed a repair installation via Windows Update. Nice & easy!
6.10.24 Updated to 24H2 OS build 26100.1882
10.10.24 Rolled back to 23H2 due to bugs & performance
16.10.24 Added Chrome browser with Privacy Badger
5.1.25 Reset PC and enabled Smart App Control
2.4.26 Ungoogled Chromium as default browser
What I'm looking for?

Looking for minimum feedback.

I'd love to have an alternative to SRP until everything is fixed by Microsoft again. Do you have any idea what I could use instead in order to decrease my attack surface? I mean using OSArmor together with Cylance would be an option, but I'd rather use only one software with real-time protection. And I think you were right... the new Cylance version only has the same interface as the endpoint version, but doesn't offer the same protection. It's only effective against PE files. So another reason why I should find something like SRP, that can for example block powershell and wscript on my system. :unsure:
 
  • Like
Reactions: Nevi, Dave Russo, silversurfer and 1 other person
SecureKongo said:
I'd love to have an alternative to SRP until everything is fixed by Microsoft again. Do you have any idea what I could use instead in order to decrease my attack surface? I mean using OSArmor together with Cylance would be an option, but I'd rather use only one software with real-time protection. And I think you were right... the new Cylance version only has the same interface as the endpoint version, but doesn't offer the same protection. It's only effective against PE files. So another reason why I should find something like SRP, that can for example block powershell and wscript on my system. :unsure:
Click to expand...
I’ve been using OSArmor for years in combo with many AVs. I’ve seen no perceptible impact.
 
  • Like
  • Thanks
Reactions: Nevi, Sorrento, silversurfer and 2 others
blackice said:
I’ve been using OSArmor for years in combo with many AVs. I’ve seen no perceptible impact.
Click to expand...
Well, as the broken SRP is most likely a temporary issue I don't really want to purchase a subscription for a software that I will probably remove after a few weeks (depending on how fast Microsoft is gonna fix it)
 
  • Like
Reactions: Nevi, Dave Russo, silversurfer and 2 others
SecureKongo said:
Well, as the broken SRP is most likely a temporary issue I don't really want to purchase a subscription for a software that I will probably remove after a few weeks (depending on how fast Microsoft is gonna fix it)
Click to expand...
That makes sense. I just don’t have time to dig into Window’s constantly changing esoteric options anymore. OSArmor is simple, effective, and elegant. Much easier for the quick fix I need these days.
 
  • Like
  • Applause
Reactions: Nevi, simmerskool, Dave Russo and 4 others
blackice said:
That makes sense. I just don’t have time to dig into Window’s constantly changing esoteric options anymore. OSArmor is simple, effective, and elegant. Much easier for the quick fix I need these days.
Click to expand...
Understandable. For me SRP was always the most simplistic and most effective way to support my AV without having to install another program, that has to run in the background all the time. But yeah, I think there is no other proper solution except using either OS Armor, Comodo Firewall or VoodooShield.
 
  • Like
Reactions: Nevi, simmerskool, Dave Russo and 5 others
Gandalf_The_Grey said:
Screenshot?
Click to expand...
I did no custom icons, etc. Just the basic theme. It would take more work to match color of Settings app.
Nord for Windows 2022-10-20 144751.png

Nord Control Panel 2022-10-20 144913.png

Wallpaper is Nord for Windows 11
Nord for Windown Wallpaper 2022-10-20 151005.png
 
Last edited by a moderator:
  • Like
  • Applause
Reactions: vtqhtr413, SeriousHoax, Gandalf_The_Grey and 7 others
Dave Russo said:
You often run voodoshield, but I see now off again ,any exclamation ? adjustment of Defender settings taken its place ? Thanks
Click to expand...
I'm confortable with my simplified setup, that's all. Nothing against VS, but I got tired of clicking through that extra layer as I normally use a Standard User Account.
 
  • Like
Reactions: Nevi, Zero Knowledge, harlan4096 and 4 others

You may also like...