Reply to thread

Message

<blockquote data-quote="ForgottenSeer 97327" data-source="post: 1011133">My parents and wife&#039;s parents setup. Works like a charm for a few years now with zero assistance calls and zero infections.1. Running Basic User plus setting UAC to deny unsigned processes to elevate (it is an option of SWH)2. Don&#039;t give them the password of the admin account3. Microsoft Defender + Configure Defender on HIGH (protected folders disabled) + SimpleWindowsHardening + Enable smartscreen for Explorer and Edge4. Microsoft Office (buy a digital one-time license for cheap)5. Run Edge and harden registry with regedit in HKCU (they can&#039;t change settings in Edge) and use BALANCED settings with just 1 extension MalwareBytes Browser Guard6. Create a NEXT DNS profile for them, enabling all security features and no privacy filters (you have BrowserGuard for that)7. Buy a large USB-disk for data backup (start the backup when you visit your parents and keep USB disk with you. so it is offline all the time) and install Syncback Free8. Harden Explorer, Edge and Office with Microsoft Defender Exploit protection (default plus)a) block images of low integrityb) block external imagesc) enable code integrity guardd) disable extension pointse) enable hardware enforced stack protectionf) validate image dependency integrity9) Disable CMD and MSHTA by enabling all protections in MD exploit protection for these two obsolete programs.10) Disable remote stuff (support etc) by disabling these services or settings as admin.11) Install a password manager for them12) Use build-in mail (safer than outlook) and add their mobile account (probably gmail) to mail and agenda for syncing and install MS Outlook App on their Android device.Don&#039;t be smart with 3rd party software or multi layered combo&#039;s, just sell your soul to Microsoft and use Andy Full&#039;s utilities to raise home user security to business level protection. When you use Microsoft Office there is no better AV than MD. Use Edge pass</blockquote>

[QUOTE="ForgottenSeer 97327, post: 1011133"] My parents and wife's parents setup. Works like a charm for a few years now with zero assistance calls and zero infections. 1. Running Basic User plus setting UAC to deny unsigned processes to elevate (it is an option of SWH) 2. Don't give them the password of the admin account 3. Microsoft Defender + Configure Defender on HIGH (protected folders disabled) + SimpleWindowsHardening + Enable smartscreen for Explorer and Edge 4. Microsoft Office (buy a digital one-time license for cheap) 5. Run Edge and harden registry with regedit in HKCU (they can't change settings in Edge) and use BALANCED settings with just 1 extension MalwareBytes Browser Guard 6. Create a NEXT DNS profile for them, enabling all security features and no privacy filters (you have BrowserGuard for that) 7. Buy a large USB-disk for data backup (start the backup when you visit your parents and keep USB disk with you. so it is offline all the time) and install Syncback Free 8. Harden Explorer, Edge and Office with Microsoft Defender Exploit protection (default plus) a) block images of low integrity b) block external images c) enable code integrity guard d) disable extension points e) enable hardware enforced stack protection f) validate image dependency integrity 9) Disable CMD and MSHTA by enabling all protections in MD exploit protection for these two obsolete programs. 10) Disable remote stuff (support etc) by disabling these services or settings as admin. 11) Install a password manager for them 12) Use build-in mail (safer than outlook) and add their mobile account (probably gmail) to mail and agenda for syncing and install MS Outlook App on their Android device. Don't be smart with 3rd party software or multi layered combo's, just sell your soul to Microsoft and use Andy Full's utilities to raise home user security to business level protection. When you use Microsoft Office there is no better AV than MD. Use Edge pass [/QUOTE]

Verification