Reply to thread

Message

<blockquote data-quote="Windows_Security" data-source="post: 775975" data-attributes="member: 50782">Most average PC users don&#039;t install software, but simply use software.Steps for install and forget default deny on Windows 101. Install Configure Defender (<a href="https://github.com/AndyFul/ConfigureDefender" target="_blank">download link</a>) to enable all Windows Defender protections2. Add a basic user SRP allowing admins to overrule, you can use Simple Software Restriction Policies or HardConfigurator. I always use my registry hack which includes additional file types. Don&#039;t forget to add the Symantec regsitry tweak to run MSI as administrator. Tell them to use run as admin when they want to install something.3. Download and install SysHardener (disable wscript)4. Open Windows Defender exploit protection, add a block starting other processes rule for- wmic.exe, csript.exe, rdpshell.exe and powershell.exe, mshta.exe5. Configure browsersa) Disable IE11 in Windows10 (programs and features)b) Add Adguard extension to Windows Edge (enable malware protection to add chrome&#039;s + Yandex safe browsing)&nbsp; &nbsp; and set Edge to start with blank new page and forget historyc) Install Chrome and add extension MalwareBytes Browser Extension, plus auto history wipeHappy days</blockquote>

[QUOTE="Windows_Security, post: 775975, member: 50782"] Most average PC users don't install software, but simply use software. Steps for install and forget default deny on Windows 10 1. Install Configure Defender ([URL='https://github.com/AndyFul/ConfigureDefender']download link[/URL]) to enable all Windows Defender protections 2. Add a basic user SRP allowing admins to overrule, you can use Simple Software Restriction Policies or HardConfigurator. I always use my registry hack which includes additional file types. Don't forget to add the Symantec regsitry tweak to run MSI as administrator. Tell them to use run as admin when they want to install something. 3. Download and install SysHardener (disable wscript) 4. Open Windows Defender exploit protection, add a block starting other processes rule for - wmic.exe, csript.exe, rdpshell.exe and powershell.exe, mshta.exe 5. Configure browsers a) Disable IE11 in Windows10 (programs and features) b) Add Adguard extension to Windows Edge (enable malware protection to add chrome's + Yandex safe browsing) and set Edge to start with blank new page and forget history c) Install Chrome and add extension MalwareBytes Browser Extension, plus auto history wipe Happy days [/QUOTE]

Verification