Advanced Security Spartan's PC Security Config

[Spartan]

Spartan's PC Security Config · Setup v2
Updated Oct 13, 2026

My current setup

• Operating system: Windows 11
• OS version and support details: 26H2
• Real-time protection: AVG Internet Security with all shields disabled except the file shield
• File and photo backups: SyncBackSE
• Device firewall: Microsoft Defender Firewall
• Browsers and extensions: Google Translate
  Gemini in Chrome
  Save Image As Type
  AdGuard AdBlocker
  Turbo Downloader for Instagram
  Adobe Acrobat
  Google Network Speech
  Page load time
  URL Shortener
  AdGuard VPN
  ChatGPT Exporter
  WhatFont
  Grammarly
  Shazam
  Popup my Bookmarks
  IDM Integration Module
  Save for later
  Bitwarden Password Manager
  Context Menu Search
  Clear Cache for Specific Site
  Enhancer for YouTube9

Spoiler: More configuration details

• Main use of this computer: For home and private use
• On-device encryption: Encryption not enabled
• Device sign-in security: Automatic sign-in / no sign-in required
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Notify me only when programs try to make changes to my computer
• Smart App Control: Off
• Network firewall: Enabled
• Router and network details: ASUS GS-BE18000 Firmware v3.0.0.6.102_39447
• Malware sample testing: I do not participate in malware testing
• Secure DNS: NextDNS
• Desktop VPN: NordVPN
• Password and passkey manager: Bitwarden
• Subscriptions: Google One Premium 2TB
• System recovery: Macrium Reflect X
• Usage and exposure: Visiting familiar websites, Working from home, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Sharing and receiving files and torrents, Requesting and accepting remote access, Streaming audio/video content from trusted sites or paid subscriptions
• Computer specs: ASUS ROG Zephyrus G14 GU405AR | Intel Core Ultra 9 386H | 32GB LPDDR5X 8533 RAM | GeForce RTX 5070 Ti 12GB GDDR7 | 14" ROG Nebula HDR Display 3K (2880 x 1800) 120 Hz OLED Display | WD_BLACK SN8100 4TB SSD | Windows 11 Pro
• Feedback preference: Detailed suggestions and alternatives welcome

Feedback on this setup is welcome.

 

[lokamoka820]

Thanks for sharing your setup! I have a question, a security recommendation, and a curiosity.

• First, why do you prefer the Windows Firewall over AVG's firewall?
• Second, I recommend setting User Account Control (UAC) to 'Always Notify' for better security (even though it trades away a bit of convenience).
• Finally... do you really need all of those browser extensions?!

 

[Victor M]

To further lokamoka point. Browser extensions can have varying permissions. And some ask for max permissions even when they don't need them. Permissions matter when you get attacked, the attacker gets the permissions.

 

[Vasudev]

Why not merge adguard rules into NextDNS?
I didn't know you upgraded to Panther Lake from ARL HX. I thought you had a decade worth of ESET standard licenses. I just recently started testing Bramble Password Manager which lets to sync to your NAS/NextCloud/Cloudflare R2 etc. Besides Identity items being missed which didn't hamper much passkeys were migrated easily with json unencrypted file. BW has become very slow and buggy while this one flies similar to Lastpass 4.x migration BW 1.0.x migration with less features.
I'm still using MR 8 Rescue ISOs you made even though Strelec includes newer ones as I don't want to risk tried and tested app which saved me multiple times when linux kernel update wrecked my nvidia gfx a decade ago.