Advanced Security Sorrento's PC Security Config

[Sorrento]

Sorrento's PC Security Config · Setup v2
Updated Oct 6, 2026

My current setup

• Operating system: Windows 11
• OS version and support details: Pro - 26300.9457 - 26H2
• Real-time protection: ESET Internet Security
• File and photo backups: Full Images daily & all on data on secondary 4TB partitioned SSD in PC+ 1 external backed daily / changes - 4 other external drives backed up frequently (rotated) drag & drop. Data also on several USB sticks - 4 external 3/4TB drives stored fireproof safe - 2.5 TB of photographs/FLAC music stored - Music & video also on other external SSD's either on router as video server / NAD Pro music system - I don't use cloud backup on PC's.
• Device firewall: Other - Internet Security (3rd-party)
• Browsers and extensions: Libre Wolf default browser - uBlock, Osprey, Privacy Badger
  Edge used rarely - Ghostery, Osprey, ESET Browser Protection

Spoiler: More configuration details

• Main use of this computer: For home and private use
• On-device encryption: Encryption not enabled
• Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID), Account password
• Security updates: Allow security updates
• Update channels: Allow stable updates only
• User Account Control (UAC): Notify me only when programs try to make changes to my computer (do not dim my desktop)
• Smart App Control: Off
• Network firewall: Enabled
• Router and network details: ASUS RT-BE92U Tri-band Router / AI protection enabled- 1 Gig FTTP
• Custom security settings: Cyberlock, O&O ShutUp
• Periodic malware scanners: Occasionally install alternate AV & image back if nothing found.
• Malware sample testing: I do not participate in malware testing
• Secure DNS: VPN DNS
• Desktop VPN: Windscribe Pro
• Password and passkey manager: Encrypted text files, on USB stick for passwords, Windows Passkey on PC for applicable sites - I don't use a 3rd party password manager preferring encrypted text files.
• Two-factor authentication: 2FA where possible
• Maintenance tools: Kurt Zimmerman HD Cleaner, Wise 355, Registry Organizer, UCheck paid, other tools.
• Subscriptions: Apple iCloud+ 2TB
• System recovery: Full C:\images done daily, after 3 months first & last images of month kept indefinitely, golden image on initial install saved, image restore enabled either on 3 second boot 3 or by USB on initial boot if required on disaster.
• Usage and exposure: Visiting familiar websites, Working from home, Opening email attachments, Online shopping and card payments, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
• Computer specs: AMD Ryzen 5 5600X 6-Core Processor (3.70 GHz)
  DEEPCOOL GAMMAXX GT BK, CPU Air Cooler
  TUF GAMING B550-PLUS Mainboard
  32 GG DDR4
  Nvidia G-Force GT1030 Video card
  Additional fast 5 USB port card
  Modular 800watt PSU
  32" HDMI Samsung display
  Cherry keyboard
  Wireless Tecknet mouse
• Notable changes: Moved from McAfee to ESET last month
• Feedback preference: Only essential issues, please

Feedback on this setup is welcome.

 

[harlan4096]

Hum... I would set UAC to Always Notify:

Notify me only when programs try to make changes to my computer (do not dim my desktop)

• Notify you when programs try to install software or make changes to your device.
• Not notify you when you make changes to Windows settings.
• Not freeze other tasks or wait for a response.

Note

This option is only recommended if it takes a long time to dim the desktop on your computer. Otherwise, it's recommended to choose one of the options above.

 

[Sorrento]

OK, it may be on that actually, sorted now thanks