What is the best Windows 7 security configuration

Hi, I want to have a very secure system and I want to know if there is something else I can add to my configuration setup:
  1. Windows 7  SP1 x64
  2. Microsoft Security Essentials
  3. Auto-update: ON
  4. Firewall: ON
  5. User Account Control (UAC): max settings & standard account
  6. Applocker
  7. DEP & SEHOP enabled
  8. Enhanced Mitigation Experience Toolkit (EMET)
  • Data Execution Prevention (Opt Out);
  • Structured Exception Handling Overwrite Protection (Opt Out);
  • Address Space Layout Randomization (Opt In);
Can I add something else? Specially in windows 7 configuration. Thanks

Make sure your router has a built-in Firewall which most do. The Hardware Firewall
and Windows Firewall can be used simultaneously.

Here is what I use and recommend : (These are all Free versions and very effective.) 

Avast and Prevx have proven extremely reliable and compatible with everything I have
thrown at them. Microsoft Security Essentials and Prevx have also proven to be very
reliable and compatible. Use MSE and Prevx or Avast and Prevx however not all 3.

Avast Home Free - stop any shields you do not need except leave Standard, Web, and
Network running.

Prevx - Home - Free

Windows Firewall

Windows Defender (not needed if using MSE)

IE - Protected Mode

IE 8 - SmartScreen Filter ON  (IE 7 Phishing Filter)

I also have IE to always start with InPrivate Filter active if IE 8.
(You occasionally have to turn it temporarily off with the little Icon on LEFT of the + bottom
right of IE)

Two versions of Avast are available 6.x and 4.8x

Avast 6.x - Home - Free - Stop the Shields you do not use (except File, Web, Network, &
Behavior) - double click the Orange Icon in Notification Area - Real Time Shields - click the
Shield you want to stop - STOP. To stop the Orange Icon from showing an error indicator -
click the Orange Icon - Upper Right - Settings - click Status Bar - uncheck the Shields you
disabled - click OK

Avast 4.8x - Home - Free - stop any shields you do not need except leave Standard, Web,
and Network running. (Double Click Blue icon - details next to OK. - upper left Shields -
Terminate those you do not use.)

Or use Microsoft Security Essentials - Free

Prevx works well along side Avast or MSE

Prevx - Home - Free small, fast, exceptional CLOUD protection, works with other security
programs. This is a scanner only, VERY EFFECTIVE, if it finds something come back here
or use Google to see how to remove. 
http://www.prevx.com/   <-- information
http://info.prevx.com/downloadcsi.asp  <-- download

PCmag - Prevx - Editor'a Choice

Also get Malwarebytes - free - use as scanner only. If you ever suspect malware, and that
would be unsual with Avast and Prevx running except for an occasional low level cookie
(no big deal), UPDATE it and then run it as a scanner. I have many scanners and they
never find anything of note since I started using this setup.



Check with your router's maker and their forums as they usually have excellent info.

Best to use WPA/WPA2 security if available and you can hide the SSID which will help
prevent others from seeing the network (note on some older routers hiding the SSID
causes connection issues and if they find out the name it no longer helps).

General Wireless Network Security Recommendations for Home Users

Introduction to Wireless Network Security

10 Tips for Wireless Home Network Security

Securing your Wireless Network

How To Secure Your Linksys Wireless Router - Similar can be used for other routers 

What are the different wireless network security methods?


These items that Vincenzo mentioned for XP also apply to Windows 7 however it does
provide increased security.

Vincent's Blog

Internet Explorer 8 - Security

Security checklist for Windows 7

Windows 7 Security Enhancements

TechNet - Security Center

Windows 7 Security Primer (Part 1) (see links in article to Part 2 and 3)

Windows 7 Security Enhancements

Steve Riley discusses Windows 7 Security Features at RSA

Windows 7: Explore new and improved security features

Windows 7: Security and Protection

A Guide to Windows 7 Security

Hope this helps.

Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle <- Mark Twain said it right.

Rob Brown - past Microsoft MVP - Windows Insider MVP 2016 - 2021
Microsoft MVP Windows and Devices for IT 2009 - 2020

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.


Question Info

Last updated January 31, 2020 Views 1,008 Applies to: