Advanced Plus Security Roboman's Security Config 2019

[ForgottenSeer 72227]

But when the stable version of 1903 is released, you will have to reinstall Windows if you want to return to the stable channel, correct?

I have no idea

I believe there is a small window (no pun intended) where you can opt out of the insider program when the next version is officially released. Usually when they release the RTM version (which usually goes to insiders first before going to Windows Update), you can at that point opt out of the insider program and keep going with the current version without having to reinstall. Usually the RTM version will remove the small watermark at the bottom right of the screen (insider preview build....). At that point you can turn off the insider updates and it should keep working without any issues, well at least that's how it use to work with past releases. If I am not mistaken the RTM version is typically released 1-2 weeks before it's available to the public (again watch for the watermark to disappear), after that you usually have 1 week or so to stop the insider builds before it continues on. If you miss the time period to stop the insider builds and it downloads the next insider version, at that point you will have to reinstall unfortunately.

 

[brambedkar59]

But when the stable version of 1903 is released, you will have to reinstall Windows if you want to return to the stable channel, correct?

Just select this option and it will automatically stop getting insider builds when you get the RTM/Release/Final build.

 

[LDogg]

Good setup! Very good setup, thanks for sharing!

~LDogg

 

[SeriousHoax]

BTW, does WD still updates only once per day by default?

 

[oldschool]

BTW, does WD still updates only once per day by default?

You may change update check by running the following Powershell command as admin.: Set-MpPreference -SignatureUpdateInterval <Hours>. You may set interval to every hour <1>, every two hours <2>, etc.

 

[RoboMan]

You may change update check by running the following Powershell command as admin.: Set-MpPreference -SignatureUpdateInterval <Hours>. You may set interval to every hour <1>, every two hours <2>, etc.

I get lines of errors

 

[oldschool]

I get lines of errors

Run Powershell as admin with this command: get-mppreference

You will see a list of options. Choose: SignatureUpdateInterval

I have mine set to "1".

 

[SeriousHoax]

You may change update check by running the following Powershell command as admin.: Set-MpPreference -SignatureUpdateInterval <Hours>. You may set interval to every hour <1>, every two hours <2>, etc.

I do that via group policy. I know about that but I was talking about the default settings. It's still the same as before then.

 

[SeriousHoax]

I get lines of errors

You can also change it like this,
Open Edit group policy. Then, Computer configuration > Administrative Templates > Windows Components > Windows Defender Antivirus > Signature Updates > Specify the interval to check for definition updates.

 

[brambedkar59]

In WIn10 v1903 "Signature Updates" is now "Security Intelligence Updates".

 

[RoboMan]

You can also change it like this,
Open Edit group policy. Then, Computer configuration > Administrative Templates > Windows Components > Windows Defender Antivirus > Signature Updates > Specify the interval to check for definition updates.

I've used this method and nailed it! Thank you.

 

[Andy Ful]

I've used this method and nailed it! Thank you.

Changing the default update interval is pretty useless if you are online. WD uses by default the cloud delivered protection which is much stronger than signatures. If you update signatures frequently, then the only effect is slowing down the computer.:notworthy:

 

[shmu26]

In any case, I am pretty sure it updates more than once a day. I haven't checked it in a long time, but I remember 3 times a day.

 

[oldschool]

Changing the default update interval is pretty useless if you are online. WD uses by default the cloud delivered protection which is much stronger than signatures. If you update signatures frequently, then the only effect is slowing down the computer.:notworthy:

I hadn't thought of this distinction. Thanks for the technical explanation.

 

[RoboMan]

My main system is dead

Just a quick tip: when 1903 reaches, be sure not to be using Comodo... just in case. I'm 80% sure that's what killed my OS (I was insider on my secondary PC with no problems). I cleaned installed 1809.

Anyways, I am back to basics. Removed CFW.

Combo:

• Windows Defender (Hard_Configurator at HIGH SETTINGS)
• VoodooShield.

Also, I'm off malware testing, I'm off virtualizing, I'm off beta testing, being Insider, I'm off TROUBLE.

Peace, quiet, and harmless. See you, nerds.

 

[oldschool]

Same setup as mine. VS does not disappoint!

I like that you are "off trouble"!

 

[outlawxtorn]

Same setup here too! Works great.

 

[Azure]

My main system is dead

Just a quick tip: when 1903 reaches, be sure not to be using Comodo... just in case. I'm 80% sure that's what killed my OS (I was insider on my secondary PC with no problems). I cleaned installed 1809.

Anyways, I am back to basics. Removed CFW.

Combo:

• Windows Defender (Hard_Configurator at HIGH SETTINGS)
• VoodooShield.

Also, I'm off malware testing, I'm off virtualizing, I'm off beta testing, being Insider, I'm off TROUBLE.

Peace, quiet, and harmless. See you, nerds.

I assume you had the autosandbox enabled?

 

[RoboMan]

I assume you had the autosandbox enabled?

Indeed! CS configuration, viruscope ON, auto sandbox ON, firewall at SAFE MODE

 

[Azure]

Indeed! CS configuration, viruscope ON, auto sandbox ON, firewall at SAFE MODE

Not completely sure if this was the case here. But I'm going to make the assumption that because the autosandbox deals with unknown files when you upgraded perhaps some of those were sandboxed and ended up breaking your system.

In my opinion, for anyone using Comodo autosandbox, disable it if you are going to update/upgrade. Then use the file scan feature to see if there are any unknown files. If you find one simply add it to trust.