Advanced Plus Security (From forum thread)StRonK's PC Security Config

[StRonK]

As of today I am using Windows 11 (Previously Windows 10). This is the configuration I use for my computer, I usually use my computer for games and series.
To be frank, I try to be an informed user, I pay attention to my privacy and security as much as possible. If you want to give advice, feel free to write, thank you.
Kind regards.

Policies that I edit for Edge when I have time

Spoiler: Edge Policies

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"BuiltInDnsClientEnabled"=dword:00000001
"SpotlightExperiencesAndRecommendationsEnabled"=dword:00000000
"PersonalizationReportingEnabled"=dword:00000000
"DefaultSensorsSetting"=dword:00000002
"DefaultSerialGuardSetting"=dword:00000002
"AudioCaptureAllowed"=dword:00000000
"NewTabPagePrerenderEnabled"=dword:00000000
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderName"="Google"
"DefaultSearchProviderSearchURL"="{google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}"
"DefaultSearchProviderSuggestURL"="{google:baseURL}complete/search?output=chrome&q={searchTerms}"
"EfficiencyMode"=dword:00000000
"StartupBoostEnabled"=dword:00000000
"ConfigureDoNotTrack"=dword:00000001
"DnsOverHttpsTemplates"="https://xxxxxxx.d.adguard-dns.com/dns-query"
"PrintingEnabled"=dword:00000000
"AutofillCreditCardEnabled"=dword:00000000
"AutomaticHttpsDefault"=dword:00000002
"BackgroundModeEnabled"=dword:00000000
"BingAdsSuppression"=dword:00000001
"BlockThirdPartyCookies"=dword:00000001
"ConfigureShare"=dword:00000001
"EdgeFollowEnabled"=dword:00000000
"EdgeShoppingAssistantEnabled"=dword:00000000
"FamilySafetySettingsEnabled"=dword:00000000
"MediaRouterCastAllowAllIPs"=dword:00000000
"MicrosoftEdgeInsiderPromotionEnabled"=dword:00000000
"ShowMicrosoftRewards"=dword:00000000
"WebWidgetIsEnabledOnStartup"=dword:00000000
"WebWidgetAllowed"=dword:00000000
"VisualSearchEnabled"=dword:00000000
"UserFeedbackAllowed"=dword:00000000
"TrackingPrevention"=dword:00000002
"NewTabPageAllowedBackgroundTypes"=dword:00000003
"NewTabPageHideDefaultTopSites"=dword:00000001
"EnableMediaRouter"=dword:00000000
"ShowCastIconInToolbar"=dword:00000000
"DefaultGeolocationSetting"=dword:00000002
"DefaultWebUsbGuardSetting"=dword:00000002
"DefaultWebBluetoothGuardSetting"=dword:00000002
"DefaultNotificationsSetting"=dword:00000002
"SleepingTabsTimeout"=dword:0000012c
"SleepingTabsEnabled"=dword:00000001
"MAMEnabled"=dword:00000000
"DefaultSearchProviderImageURL"="{google:baseURL}searchbyimage/upload"
"TyposquattingCheckerEnabled"=dword:00000001
"AdsTransparencyEnabled"=dword:00000001
"DnsOverHttpsMode"="automatic"

 

[harlan4096]

I would set Windows UAC to Maximum.

In Periodic security scanners: I don't scan unless there is anything suspicious, please specify the scanners used.

Also in Device recovery & backup, a full image backup solution would be welcome. I guess restoring a full system image backup with Macrium Reflect is faster than re-format the system, apply all the updates and re-install all the apps...

Thanks for sharing

 

[StRonK]

Thank you for your valuable comment.

I was using it in default as I don't know what the difference is between default and maximum in Windows UAC. I did what you said and set it to maximum.

Normally I used Kaspersky Internet Security, but now that my license has expired that's why I didn't add, I am trying Windows Defender, if I am not satisfied, I will probably continue to use Kaspersky Internet Security. Actually, to be honest, Windows Defender doesn't give me confidence, I will probably continue to use KIS.

thank you again for your answer

 

[Back3]

KIS is very good but what you have on your PC with Microsoft Defender is also excellent: SWH, Firewall Hardening and DefenderUI Pro…. You should have confidence….

 

[StRonK]

Today I backed up my device following the advice given by @harlan4096 . I chose AOMEI Backupper software.

It's my first time using backup software and I'm really baffled. After backing up 19.5GB files, the backup size was 9.5GB, which is unbelievable. I also added AOMEI Backupper shortcut option to the boot menu, I can boot and restore from backup even if Windows crashes in any way, this feature is perfect.

I have learned a lot of useful information from this forum on this and other topics, thank you everyone.

 

[harlan4096]

After backing up 19.5GB files, the backup size was 9.5GB, which is unbelievable

Backups programs apply compression

 

[StRonK]

I uninstalled AOMEI Backupper software and will never use it again. Today I wanted to restore my system with the backup file that I have used many times, it loaded the backup correctly but the window did not open. I know that there is no problem with the backup I use, I have used it many times. Fortunately, for such situations, I wrote windows 10 winpe to the flash drive. There were a lot of software like Macrium Reflect in winpe. In Macrium Reflect settings, there is an option to edit boot-related errors, I used it and the system booted without any problems.
Macrium Reflect will be the only backup software I will use from now on.

Now I use Kaspersky Internet Security as anti virus.

Since nextdns is now connected to the correct server as a location, I switched from Adguard to Nextdns.

I will now periodically scan the system with AdwCleaner, HitmanPro software. (Kaspersky Internet Security always active)

I use Simplewall software with windows firewall to restrict network traffic and connect only the software I want to the internet.