How to Make Windows 10 Secure - Chris Titus Tech
video description
Date: 2022-03-21
Related videos
Comments and reviews: 10
taylor
Windows is enough secure if people use common sense and know how to secure it. I have setup various things which make it super secure and never had a virus in last 13 years of using computers and laptops (all without using any kind of antivirus software)
1. Use a standard account
2. UAC to its maximum
3. Software Restriction Policies with Disallowed as default setting and adding various Windows directories which are open to write and execute with a disallowed permission
4. Adding all kinds of executable file formats (around 50 file extensions) to SRP Designated File Types and blocking their execution altogether.
5. NTFS permissions to deny copying and execution from drives and folders.
6. Firewall tweaks to harden Windows Firewall
The above makes Windows rock solid in security without using any antivirus software.
reply
Windows is enough secure if people use common sense and know how to secure it. I have setup various things which make it super secure and never had a virus in last 13 years of using computers and laptops (all without using any kind of antivirus software)
1. Use a standard account
2. UAC to its maximum
3. Software Restriction Policies with Disallowed as default setting and adding various Windows directories which are open to write and execute with a disallowed permission
4. Adding all kinds of executable file formats (around 50 file extensions) to SRP Designated File Types and blocking their execution altogether.
5. NTFS permissions to deny copying and execution from drives and folders.
6. Firewall tweaks to harden Windows Firewall
The above makes Windows rock solid in security without using any antivirus software.
reply
Steve
if you made windows more secure it would start losing market share. these recommendations are alright. I personally do a lot of them by default. However, I am yet to see someone come to my shop with a computer compromised by a Microsoft live account, it is a security risk but relatively rare. The vast majority of compromises are still phishing attacks through email and download applications from unknown webs sites. user education is the place to start at and I am starting to see a lot of the same issues happening is apple computers. The flaw is not with windows or any operating system it is the people using it, yes Linux enforces security like not being able to logon with admin users and require the use of sudo everywhere yes users are more secure but then the complaints go up
reply
if you made windows more secure it would start losing market share. these recommendations are alright. I personally do a lot of them by default. However, I am yet to see someone come to my shop with a computer compromised by a Microsoft live account, it is a security risk but relatively rare. The vast majority of compromises are still phishing attacks through email and download applications from unknown webs sites. user education is the place to start at and I am starting to see a lot of the same issues happening is apple computers. The flaw is not with windows or any operating system it is the people using it, yes Linux enforces security like not being able to logon with admin users and require the use of sudo everywhere yes users are more secure but then the complaints go up
reply
Justin
Question, if you don't mind answering.
I have to use windows 10 because a piece of hardware I have only has windows based firmware that i can't run on linux, so I want to know, if I use a secured windows 10 LTSC just for gaming, and then boot linux mint from a usb for my usual computer stuff, windows won't be able to interact with it, right? or is there a certain issue that live distro's like tails os does that by default linux mint installed to a usb would not have?
I want to avoid dual-booting if at all possible, just because it seems like a real headache to deal with from what I've heard, as far as windows writing over linux and whatnot haha
reply
Question, if you don't mind answering.
I have to use windows 10 because a piece of hardware I have only has windows based firmware that i can't run on linux, so I want to know, if I use a secured windows 10 LTSC just for gaming, and then boot linux mint from a usb for my usual computer stuff, windows won't be able to interact with it, right? or is there a certain issue that live distro's like tails os does that by default linux mint installed to a usb would not have?
I want to avoid dual-booting if at all possible, just because it seems like a real headache to deal with from what I've heard, as far as windows writing over linux and whatnot haha
reply
Mark
In fairness to Chris and Microsoft, when I did run Win10, I used the Windows Defender/Whatever they call it now, and cross-tested with other anti-malware programs. NEVER found anything. Tested their firewall against ShieldsUp! and another site, and there was only a few things which even showed up as questionable (ports that if you totally shut them down you can have issues). I did not run the other anti-malware programs because the built-in defenses worked well out of the box.
reply
In fairness to Chris and Microsoft, when I did run Win10, I used the Windows Defender/Whatever they call it now, and cross-tested with other anti-malware programs. NEVER found anything. Tested their firewall against ShieldsUp! and another site, and there was only a few things which even showed up as questionable (ports that if you totally shut them down you can have issues). I did not run the other anti-malware programs because the built-in defenses worked well out of the box.
reply
Dannydogs4
I just recently switched over to Ubuntu Linux. I was tired of Windows 10 hogging up my processor with applications that I didn't even want it to run. I am very happy with the switch so far. The only downside is limited to no support for certain software, such as Adobe premier elements. I just thought of a workaround though. I can just use a Windows 10 VM that isn't connected to the internet. Very interested in other Linux videos you plan on making.
reply
I just recently switched over to Ubuntu Linux. I was tired of Windows 10 hogging up my processor with applications that I didn't even want it to run. I am very happy with the switch so far. The only downside is limited to no support for certain software, such as Adobe premier elements. I just thought of a workaround though. I can just use a Windows 10 VM that isn't connected to the internet. Very interested in other Linux videos you plan on making.
reply
Terry
This was very helpful. Thanks for covering things that aren't standard security recommendations.
How could someone get to my computer that's behind my ISP gateway, router, and NAT? They shouldn't even know I exist from outside my network.
Also, I'm on 1909 now, and I don't see the -Choose which updates...- section in the advanced options for Windows Updates.
Will O&O interfere with my Super Antispyware?
reply
This was very helpful. Thanks for covering things that aren't standard security recommendations.
How could someone get to my computer that's behind my ISP gateway, router, and NAT? They shouldn't even know I exist from outside my network.
Also, I'm on 1909 now, and I don't see the -Choose which updates...- section in the advanced options for Windows Updates.
Will O&O interfere with my Super Antispyware?
reply
GGasfalt
You might know as i seen you doing debloat windows vid . I debloated my windows but in result i cant open my security centre , it looks like its opening but than instanly disapearing . Is there anyway of bringing back my security centre ? I have to mention that Firewall is opening and windows defender service is running , also it removed the security centre icon down right corner .
reply
You might know as i seen you doing debloat windows vid . I debloated my windows but in result i cant open my security centre , it looks like its opening but than instanly disapearing . Is there anyway of bringing back my security centre ? I have to mention that Firewall is opening and windows defender service is running , also it removed the security centre icon down right corner .
reply
Tactical
guys be very careful with o7o shutup. i'd never heard of it before so downloaded it and followed the instructions. it created a restore point then blue-screened me after it switched the settings. now i cant log into my windows partition without immediately bluescreening. cant even use the damn restore point lol. luckily i have my linux partition while i figure out what to do
reply
guys be very careful with o7o shutup. i'd never heard of it before so downloaded it and followed the instructions. it created a restore point then blue-screened me after it switched the settings. now i cant log into my windows partition without immediately bluescreening. cant even use the damn restore point lol. luckily i have my linux partition while i figure out what to do
reply
Xiang
Could you make a video about windows firewall ( I cant figure out when I block all inn and out, what I need to open to make things work as they should.. and it seems like windows is adding and removing firewallrules by it self.) You have a good way of explaining, and Ive learned a lot from your vids, thank you!. Let me know if you can help with understanding windows firewall :)
reply
Could you make a video about windows firewall ( I cant figure out when I block all inn and out, what I need to open to make things work as they should.. and it seems like windows is adding and removing firewallrules by it self.) You have a good way of explaining, and Ive learned a lot from your vids, thank you!. Let me know if you can help with understanding windows firewall :)
reply
itech
-5:22 if you're stuck with win10 home (or if your machine is loosely domain tied and you see the -These settings are managed by your system administrator) the options still live in your registry and are still configurable, but you'll have to look up the locations to edit and add values manually.
reply
-5:22 if you're stuck with win10 home (or if your machine is loosely domain tied and you see the -These settings are managed by your system administrator) the options still live in your registry and are still configurable, but you'll have to look up the locations to edit and add values manually.
reply
Add a review, comment
Other channel videos
