Security configuration for new pc

[Baker]

Hello everyone, I am new in this forum and not a tech-savvy. I bought a surface pro 6 i5 and need some suggestion to set up the security on this device. I like to keep things simple.
My security configuration is

• Windows 10 home 1803
• Windows defender-Sandbox enabled, ransomware not enabled
• Malwarebytes antimalware (on demand scanner only)
• Firefox with ublock origin (3rd script and frames block)
• Sandboxie: Download folder, firefox, adobe reader, vlc is forced under sandboxed with auto delete.

I have installed internet download manager but having difficulties running it under sandboxie. Software compatibility under sandboxie is checked but it still not working with firefox 63.0.3 and sandboxie 5.26
Should I enable ransomware protection too? I also want to know about the exploit protection settings. Do you guys use default settings of exploit protection or tweak it for tighter security? If you need to tweak the settings for exploit protection can you give me some direction how to do it?
And if you enable ransomware protection how would you manage app permission for protected folders?

 

[harlan4096]

You may also publish Your config in this link, and will get suggestions from users of the forum

Windows Security Configuration

 

[JM Safe]

I would add also ZAM Free and EEK or NPE, but please follow @harlan4096 link and create your thread to get more tips from me and other helpful members!

 

[Freki123]

@Baker If you choose to use a backup program Macrium Reflect 7 is available in a free version and solid.
Maybe search the sandboxie forum if others got the same problem (the devs are helpfull if you explain your problem in detail), or try a beta of sandboxie? For me the betas they offer have been stable like 95% of the time.
For exploits: Maybe take a look at system hardener or/and osarmor from novirusthanks if they fit your needs.
For all tweaking its always handy to have a working backup ready if stuff goes wrong.

 

[kylprq]

ignore it windows defender and use comodo firewall with cruelssister s settings its smoother and no problem here with idm in firefox 63 latest