Good setup!
I'd just like to add a few things about CryptoPrevent useful for everyone.
I tested CryptoPrevent time ago and this app allows you to block programs from running without having to put a hand to the Registry Editor, thus ensuring a good protection against the malware.
The "Default" option selected allows you to block programs from the main system folders (only directories where there should be no executables ...!) and to avoid files with double extension.
Using "Maximum protection" option, CryptoPrevent will block the loading of the binaries from the % temp% folder and then BCDEDIT. exe loading (to prevent a malware could alter the boot options in Windows).
Maximum protection activation could create problems on installation of some software and the operation of certain applications for data backup.
So if you had problems, you can temporarily disable the security policy set with CryptoPrevent.