Basic Security tanto259's 2018 configuration

[tanto259]

Privacy:
- DNS-over-HTTPS with Cloudflare's 1.1.1.1 through DNSCrypt Proxy

Productivity:
- Microsoft Office 365 Personal
- Ubuntu Subsystem

Virtual Environment:
- Client Hyper-V

Drive and File Encryption:
- BitLocker with XTS-AES 256bit encryption method and TPM + PIN authentication
- PGP through GnuPG (for important files)

Other Settings:
- Apps access to Privacy Settings are whitelist-only, defaulted to Force Deny through Group Policy
- Windows Defender settings are set to Block at First Sight with High Blocking Cloud Protection level and locked through Group Policy
- Connection defaulted to TLS 1.2 and above (still waiting for AdGuard to support TLS 1.3)

 

[JHomes]

I'd recommend you implement a proper backup solution. Rollback Rx Home and Macrium reflect are both free, Rollback Rx will also protect your data via encryption.

 

[bribon77]

I recommend Zemana free antimalware and Norton Power Eraser for scans on demand. And a backup program. Macrium Reflect Free.
Thanks for sharing.

 

[tanto259]

Thanks for the suggestion!

Added:
- Macrium Reflect Free
- Emsisoft Emergency Kit (on an USB)

 

[Lightning_Brian]

I'd recommend that you use Zenema Antimalware (ZAM) and Norton Power Eraser as both of these on demand free scanning tools are quite good!

Links:

Zemana Antimalware (ZAM): Zemana Anti-Malware | Advanced Malware Removal Software

Norton Power Eraser: Norton Rescue Tools

Nice addition with EEK on a USB and Macrium Reflect Free!

You could use Adguard for Google Chrome for maximum protection with both the desktop and Chrome extension enabled.

Good configuration!

~Brian

 

[tim one]

You have a nice setup, Chrome loads web pages in a sandbox, but alternatively, you can also install Sandboxie, a program that creates virtual environments limited in the size of the allocated memory space and on the access to the resources of the computer. Useful, then for a secure web surfing and to test programs or files of dubious origin

 

[Deletedmessiah]

Good setup. This might interest you: ConfigureDefender utility for Windows 10
Nice tool to configure Windows Defender settings by @Andy Ful

 

[Andy Ful]

Using ConfigureDefender with Group Policies on Windows 10 Pro, requires setting the colliding policies to 'Not configured' in GPO. If not, then ConfigureDefender settings will be back-overwritten by GPO Refresh feature (after some hours).