Advanced Plus Security Vasudev's Security Config for 2k19

[Vasudev]

This is my security config and I'll add new items I added in December.

Added:
Configure defender
Side View
Google shortcuts

 

[harlan4096]

Please consider to enable OS Security Updates, thanks for sharing

 

[Vasudev]

Please consider to enable OS Security Updates, thanks for sharing

I do only offline updating once Windows Insiders or Guinea Pigs have given green flag for update. MSFT floods my PC w/ useless driver updates and I use wub to prevent that.
I update all OS offline incl. Linux.
@Jack Can you add an option for Offline updates w/ win updates disabled?

 

[brod56]

To be honest, this config is way too cluttered. I would say start from scratch (keeping only the bare essentials like Smartscreen, Firewall, Windows Defender, uBlock Origin, QuadDNS, Macrium Reflect) and then try to add only what you think is a priority to you.
And please, enable the updates - if you are scared that the new versions might break things, choose the deferred distributions.

 

[Vasudev]

To be honest, this config is way too cluttered. I would say start from scratch (keeping only the bare essentials like Smartscreen, Firewall, Windows Defender, uBlock Origin, QuadDNS, Macrium Reflect) and then try to add only what you think is a priority to you.
And please, enable the updates - if you are scared that the new versions might break things, choose the deferred distributions.

DNS is configured at router side and on my PCs Smartscreen,uBO and WD is only things running aside from few applications.
MR PE is on my USB drive and so are my LiveCDs ISO.
I'm not scared of updates but I defer it and sometimes skip some patches and sometimes apply some out of band updates like the IE11 bug and had to update on Day 1. 99% of the time windows update is disabled since I keep track of them manually including latest driver updates through windows update catalog or WSUS. Same rule applies to my other PCs with W10 Pro. I simply distrust MSFT after v1809 fiasco and that's the reason I'm refusing to update to v1809 and beyond and sticking with v1803 until its EOL period.

 

[Vasudev]

Added:
KFA 2019 KFA for testing.

 

[brod56]

I simply distrust MSFT after v1809 fiasco and that's the reason I'm refusing to update to v1809 and beyond and sticking with v1803 until its EOL period.

You'll be missing huge Windows 10 features which will not only improve the functionality of the system but also its security mechanisms.

 

[Vasudev]

You'll be missing huge Windows 10 features which will not only improve the functionality of the system but also its security mechanisms.

Not really, MSFT silently backports everything. Those new features in W10 are temporarily waiting to be removed in subsequent release w/o notice.
Then again, if there's a new version coming up this Spring I might try it in a VM. For now, v1709 is the base minimum for any application to target including driver, so for few years I'm good.
Did the same thing when v1709 was released and I was still on v1703 until v1803 was in Insiders release.

 

[brod56]

Then again, if there's a new version coming up this Spring I might try it in a VM. For now, v1709 is the base minimum for any application to target including driver, so for few years I'm good.

You are, but that's not my point. You'll be missing Sets (which improve productivity), WD tamper protection, etc
It's too much of a compromise in my opinion. You're the one deliberately wanting to be on a outdated version just because one build had problems for some users.

 

[Vasudev]

You are, but that's not my point. You'll be missing Sets (which improve productivity), WD tamper protection, etc
It's too much of a compromise in my opinion. You're the one deliberately wanting to be on a outdated version just because one build had problems for some users.

If you check Program Data\Microsoft\Win defender\Platform you will see that WD is updated to latest consumer build using windows update to give same level of protection no matter what! Just use Configure Defender and see how strong the AV is.
Sets was the most interesting but not its worth the time and privacy because other users can get all your activity by pressing Win+Tab or Swipe up gesture.

 

[Vasudev]

Removed:
Kaspersky Free 2019
Kaspersky Secure connection.
Added:
WD v1812.5 and configure defender.
Updated most drivers to UWD/UWP drivers except Intel and nvidia drivers.
Detailed Specs of my systems and added External HDD for on-site backup as Data Backup option.

 

[JM Safe]

If you do offline updates then you are good to go.

Thanks for sharing.

 

[Vasudev]

If you do offline updates then you are good to go.

Thanks for sharing.

That's the way it has been since I joined MT. I have limited bandwidth internet and daily limit is 1.5GB.
I might delay updating windows if there are problems but if there's none I'm always on latest update.
Added:
0Patch

Will be modding my BIOS w/ new RAID,GOP,microcode and unlocked menus on most PCs since they're EOL.

 

[Wraith]

Removed:
Kaspersky Free 2019
Kaspersky Secure connection.
Added:
WD v1812.5 and configure defender.
Updated most drivers to UWD/UWP drivers except Intel and nvidia drivers.
Detailed Specs of my systems and added External HDD for on-site backup as Data Backup option.

Why did you remove Kaspersky? It's way better than WD.

 

[Vasudev]

Why did you remove Kaspersky? It's way better than WD.

It has false +ves and reduced battery life because of high cpu usage.

 

[Wraith]

It has false +ves and reduced battery life because of high cpu usage.

Sorry I didn't notice you were using a laptop. Yes Kaspersky is terrible for laptops when running on battery. But I've never had any false positives with Kaspersky till date.

 

[Vasudev]

Sorry I didn't notice you were using a laptop. Yes Kaspersky is terrible for laptops when running on battery. But I've never had any false positives with Kaspersky till date.

On AC power, Kaspersky is even faster than ESET and very light. Rarely affected benchmark scores.
Any download from Mega is blocked and even modded drivers are blocked. I couldn't figure out why they were corrupt.

 

[JM Safe]

That's the way it has been since I joined MT. I have limited bandwidth internet and daily limit is 1.5GB.
I might delay updating windows if there are problems but if there's none I'm always on latest update.
Added:
0Patch

Will be modding my BIOS w/ new RAID,GOP,microcode and unlocked menus on most PCs since they're EOL.

That's ok.

 

[Wraith]

On AC power, Kaspersky is even faster than ESET and very light. Rarely affected benchmark scores.
Any download from Mega is blocked and even modded drivers are blocked. I couldn't figure out why they were corrupt.

U mean Kaspersky was blocking the downloads from MEGA?
I use ESET IS and KIS on two different desktops but to me ESET seems to be a bit lighter than Kaspersky. I mean launching of apps feel snappier on the PC with ESET.

 

[Dhruv2193]

Good config.