As a security professional it's important to note that alot of malware can run scripts that will easily bypass the UAC since more people do not put a password on the Admin account. It's nice to require certain key strokes but scripts can mimic that. What a script can't do is KNOW your account password. So it will be stopped dead right there. Us the normal account as your daily driver but lockdown your Admin account with a password and you will be covered. Grea video.

@klwthe3rd

Жыл бұрын

@@FungusGenerator The built in Admin Account should immediately be password protected. That account should only be used for major administration of the computer. Such as adding printers and other devices. The standard user account should be used as your daily account as stated by Liron.

@kabloosh699

Жыл бұрын

@@FungusGenerator make your own admin account. Disable the default admin account. I believe Windows now does this by default. It definitely helps to force you to type in a separate password for administrative privileges.

@LironSegev

Жыл бұрын

100% - but as a security professional, surely you aren't advocating for NOT doing a simple step that can help a user protect their pc? Everything in security is wrenching. Adding and not taking away.

@harag9

Жыл бұрын

@@klwthe3rd Great info, I have one account (admin) on my pc (and it's windows account to) and i'm the only one that uses it, if I create a local account, will all my already installed apps be ok? or do I need to set things up again? Can I change the Name of my Admin Account so I can create my local account with that name instead?

@klwthe3rd

Жыл бұрын

@@harag9 Great question. What I would do to make it easy is create ANOTHER account but make that new account the Admin account. Then, and only then, after that account was created, go back to the account that you use everyday(which is an Admin account) and change it to standard user status. That way you won't have to reload anything.

The thing about UAC -- if it pops up too frequently, less sophisticated users get into the habit of just clicking "OK" regardless of what it's asking. Striking a balance between proper warnings and just being annoying is tricky.

@LironSegev

Жыл бұрын

true

I really enjoy your episodes. I didn't even know half the things you point out. I'm getting a good education. You explain everything clearly and you're really patient. Thanks for the uploads! Mateo in Hamilton, Ontario

@LironSegev

Жыл бұрын

happy to help!

As always, great assistance. thank you VERY much, Liron. Appreciated.

@LironSegev

Жыл бұрын

My pleasure!

Great video! Thank you for sharing these simple but essential tips for securing our Windows 10/11 computers. It's great to see experts like you sharing their knowledge and experience to help users like me stay safe and protected online. I appreciate the clear explanations and patience you show in your videos, and I always come away with valuable insights and actionable steps. Keep up the fantastic work!

@LironSegev

Жыл бұрын

Glad it was helpful! And thank you for hanging out here 👍

YOU ARE PRICELESS!! Thank You!!! ♡

You could mention about setting global secure dns in windows 11. For a little bit of extra security one could browse internet using a virtual machine

Keep them coming Liron

Thanks a lot brother!

I love your vids ,doing all the hard work to make it easier for me, much appreciated. Thanks

Love ya for these. Interestingly I had them all as you told us to change to. Feel safe!

@LironSegev

Жыл бұрын

Excellent!

Great job of simplifying the bare necessities 🤔 Thanks 💖 🇨🇦

@LironSegev

Жыл бұрын

You are so welcome!

Super helpful thank you bro.....

Thanks old mate ,Dont know what we would do without your help.

@LironSegev

Жыл бұрын

Any time!

again thanks..... as it is said done and done!!!

@LironSegev

Жыл бұрын

Epic 🎉

I checked the system restore setting on one local machine and found it was turned on for the data drive but not the operating system drive. You might want to mention to viewers that the user needs to individually check each drive since system restore is drive dependent and just because it is turned on for one drive doesn't mean it is turned on for all drives on that computer.

@SpiritintheSky.

7 ай бұрын

Very interesting but I wouldn't know how to check each drive, not being an IT professional. Perhaps Mr Segev would know?

Thank you.

Thank you

Some i knew but i learn a lot, been lazy about his for almost 10y, time to catch up, Thx Liron you are a gold mine!

@LironSegev

Жыл бұрын

Glad to help

as usual, most useful things from you, thousand thanks for them!

@LironSegev

Жыл бұрын

So nice of you

Very useful and education. Thank you

@LironSegev

Жыл бұрын

You are welcome

Great tips Thanks ❤

@LironSegev

Жыл бұрын

Thanks for watching!

Thank you very much for the explanation! Outstanding work !!! You help everyone protection him / herself in a decent way !!

@LironSegev

Жыл бұрын

Glad it was helpful!

@philip6502

Жыл бұрын

"Themselves" works.

@adriandecu6846

Жыл бұрын

@@philip6502 ... 😃😃😃😜

BIG thanks for this important info. My PC is updated.

@LironSegev

Жыл бұрын

You're welcome!

Thank you!

@LironSegev

Жыл бұрын

You're welcome!

Love the video, a personal recommendation is also changing the UAC prompt to require a password, regardless who is logged in. I do this because programs can spoof the keyboard and type in 'shift' then 'enter' in turn clicking yes for you, then they are running with admin permissions. By requiring a password the program can't just click okay.

@khalilsworld8266

Жыл бұрын

How do you do that

@QuantumTechTraveler

5 ай бұрын

How

This was very helpful and I feel like I've made my computer much more secure. Thank you

@LironSegev

Жыл бұрын

Glad it helped!

Fantastic, Liron. 👍👍

@LironSegev

Жыл бұрын

Many thanks

Very good information, thank you.

@LironSegev

Жыл бұрын

So nice of you

👍👍👍Thank you

Very useful video. A lot of this stuff I had no idea about.

@LironSegev

Жыл бұрын

Glad to hear it!

Yea, SYSTEM RESTORE not turned on, on a 2 year old laptop! Thanks for showing how to get at and program this function.

Thanks

10:20 fun fact if you mess up ur windows too much, it can't even restore from the restore point anymore and it says failed to restore, had this some times this shet lol

The dimming feature has a tendency to hang some systems for an extended time. I usually lower it to the setting below that.

Thanks Boss

@LironSegev

Жыл бұрын

No problem

Thanks so much for theses

@LironSegev

Жыл бұрын

Appreciate you being here 🔥

All your videos are great, but this one was very useful.

@LironSegev

Жыл бұрын

Glad to hear that!

Thanks!

@LironSegev

Жыл бұрын

Welcome!

Thank you so much.

@LironSegev

Жыл бұрын

You are so welcome!

Hi Liron I took your advice and changed my settings. But how do I undo these settings from this video. Help!

good info 👍

@LironSegev

Жыл бұрын

Thanks 👍

Brilliant as always,frantically making notes to carry out the instructions .Am looking very accomplished,only under your tuition.Keep them coming Liron.

@LironSegev

Жыл бұрын

So nice of you

Why not create a new user that is an administrator account, login to that account and change the other administrator account that you have been using up until now to Standard user? That way all your apps are installed and your documents, downloads and pictures are still accessible?

Always practical tips. Thanks for your videos. Can you make a video on BING with ChatGPT ?

@LironSegev

Жыл бұрын

I am waiting for this "AI" stuff to mature a bit. Its all over the place now and causing a lot of confusion.

Am i ever glad i found this video i found a user account on my computer that i definitely know that i did NOT create! Now it's gone! Thank you Liron!

@cell718

Жыл бұрын

What was its name?

For over 20 yrs I've been trying to convince my clients to login to windows as a standard user. Nobody seems to care about security until it is too late. These days, you can't even play or install some games without Admin level privileges, it is a shame and a big mistake.

@LironSegev

Жыл бұрын

Agree

Professor Segev for the win!

Do you need to do dns changes in your Internet adapter if you all ready made changes in your Internet explorer browser like Microsoft edge?

I made the changes that you advised, but there has been one problem -- I hope you can help me solve it. When I logged onto my Non-Admin account, and tried to go to online banking, Safepay did not open up to protect the exchange. I went to check my security software's settings, and discovered the Icon for my antivirus was not on my non-admin desktop either, so I couldn't use it. I had to log off and go online with my administrator account to check my banking. Is there a way to make my antivirus available for the non-admin account, or at least to force safepay to open up no matter who is using the computer? Thanks!

תודה לירון על הטיפים האלה, לא ידעתי על חצי מהם בעבר

@LironSegev

Жыл бұрын

no problem!!

I was wondering if changing ip protocol from ip4 to ip6 gives a better security?

Thank you. Are the browser security settings overriding the Windows network connections setting? If we can change to secure DNS in the browser, why would we ever need to edit the preferred DNS server in TCP/IPv4?

@LironSegev

Жыл бұрын

If you only do it in the browser, then everything else that uses the internet (email, updates etc.) will still use your default DNS. I like to do it at the Network level. Some people aren't comfortable making the change there, so you can just do it in the browser.

thank you for defending our computer from sites and hackers its realy helpful to learn without knowledge

What do you do on a mac?

Can't change dns on windows 11? I don't see ipv4 at all on mine but I am using a wireless connection.

WHEW TMI. gotta rewatch this one.

@LironSegev

Жыл бұрын

haha - glad I kept it to only 5

What if I get this setting is disabled on managed browsers when i go into Chromes security settings? How do i change the Use Secure DNS When it sis disabled ?

You can use Group Policy to change UAC settings so you don't need to create a new account as user.

@LironSegev

Жыл бұрын

only if you have Win Pro as Group Policy doesn't come with Home :)

@Danny132

Жыл бұрын

@@LironSegev i know there i a workaround on windows 10 home does windows 11 home not have this work around yet?

Awesome 👍

@LironSegev

Жыл бұрын

Thanks for the message

A material showing how to prepare a computer for a computer service (repair) would be useful, so that the employees there do not have access to our data, e.g. creating a separate user account so that the service technician can use diagnostic tools, etc.

@LironSegev

Жыл бұрын

hmmm thats tough as the repair person would need full Admin access so they can make changes to fix the issues. But I have some ideas - thanks. I noted it down as a potential video

@solidus2360

Жыл бұрын

@@LironSegev Thank you for your answer. Such material will certainly be useful. I will look forward to it in the future. Thanks for what you do.

I usually disable all windows security stuff as I only use my PC for gaming . Less hurdles for pc to run smoothly. Use AtlasOS implementation.

You can also set the dns on the router level

@LironSegev

Жыл бұрын

true - that is ideal just not as convenient but def better since it impacts every device!

Buying a new computer. These tips will help me enormously!

@LironSegev

Жыл бұрын

awesome!

Thi9s man's a life saver.

@LironSegev

Жыл бұрын

happy to help! thanks for watching!

Changing DNS things won't affect my 'private' use of Private Internet Access?

@LironSegev

Жыл бұрын

Shouldn't as all that should be going via your VPN

I don't understand the reason for number 2. I am the only one using my pc and sometimes it requires admin priviliges. Could it be useful if there are multiple people using the same pc? About 10:42 how much should the disk usage be set to?

in the system restore point configure menu the "turn on system protection" button is grayed out, can anyone help?

Good video.

@LironSegev

Жыл бұрын

Glad you enjoyed it

Which DNS is better the Google or cloud thanks for the video really appreciate it

@LironSegev

Жыл бұрын

try both - see which one seems "faster" for you. In some countries Google is a lot slower to resolve websites names and visa versa.

@alex_senpaiyt7852

Жыл бұрын

Ok thanks

I modified the registry to work the UNIX way, simply put, mine asks for the admin password everytime, my UAC prompt has a password requirement. It gives me time to think why this process needs admin rights or why it deserves to be run as admin. Aside from setting UAC to the maximum settings.

The knowledge I get from your videos is priceless. Sorry In advance for saying this. I just hope it’s all legit ! Anyway I’m wondering if you can show all this stuff but using a MAC? I stopped buying a windows anything a long time ago. I may go back to one just because of your videos ! Thanks LIRON🙏👍

@LironSegev

Жыл бұрын

sorry Joseph, but I don't have any apple products

@busboyta

Жыл бұрын

No worries brother.

How about for Mac?

I set the DNS in the router. I use cloudflare. That covers all the browsers

@LironSegev

Жыл бұрын

Yup

Is there an OSX version of this type of video?

Dont change DNS server for IPV6?

Hi Liron great video. Although at 9:18 time stamp when I try to turn on the "Use secure DNS" option in my Chrome browser the slider bar is grey out, and the line under "Use secure DNS" states "This setting is disabled on managed browsers" . How do I enable this option? Note this options is available and enable on Microsoft Edge

@LironSegev

Жыл бұрын

hmmm are you using a computer that is managed by your company's IT department?

@anthonylenzo3675

Жыл бұрын

@@LironSegev Yes it works computer (laptop)... I travel quite a bit, but I am careful where I connect and use VPN that works provide. What is odd I'm able to set these DNS changes in Microsoft Edge but not on Chrome?

You should consider showing how to do a DNS server change in both Windows10 and 11. In Windows 11 it looks substantially different from Windows 10 and there are a couple of extra clicks required to get to the place where you input your new DNS server IP address.

@AltonV

Жыл бұрын

The part he is showing is identical

what would changing the DNS do to my gaming experience, I already suffer from lag and poor detection due to my isp throttling my network

@LironSegev

Жыл бұрын

hard to say but I am not so sure it will have a major impact as once the name is resolved (and it gets you the IP address) DNS, doesnt really play into it anymore

The changes with DNS , how does that work when using a VPN

if I use VPN I have to do the DNS thing too?

Hello there. i made a local account and changed UAC settings. but when i load up norton antivirus the settings for Antivirus and Firewall are all greyed out. is this normal.

Hey Liron, is it possible to clear browser cache for only specific sites, so that we don't have the time-wasting inconvenience of having to log back into the 100's of opened tabs in different browsers, every time we have to clear cache in order for other sites to actually work?

@LironSegev

Жыл бұрын

Chrome Settings > Privacy & Security, See all site data and permissions, delete the site. You can also open up the website and press ctrl F5 which forces the page to reload regardless of the cached content. This does NOT clear the cache, just gives a fresh copy of the webpage

@DAVIDJCARON

Жыл бұрын

@@LironSegev Thanks..

I have a "guest" account on my PC that I can't get rid of, is that something I should worry about, and if it is, how can I get rid of it?

Here is something I noticed after requiring ctrl-alt-delete be pressd when putting the computer on hibernate it completely bypasses that and password. No Ctrl+Alt+Delete or sign in screen. It go's strength into my account. Weird

UAC is so annoying though. Considering I'm the only one using my PC :). I Change the DNS at the router level so it affects all the computers and devices attached to it. Me personally, I use Adguard DNS

@LironSegev

Жыл бұрын

ahhh you THINK you are the only one using your PC...the reason I change it is that since you are told UAC not to bother you when you are logged in, what happens if you get malware? It will install with your current account. Since you are logged in, you wont be notified.

When i press- change your account type in the control panel- it says- do you want to allow this app to make changes to your device. Do i press yes or no. Whatever i press,it says the same thing.

Is there a similar action for Mac users?

@LironSegev

Жыл бұрын

Unfortunately I don't use a Mac

DNS server: my ISP is AT&T. Consequently, I use their residential gateway. Apparently AT&T's gateway does not permit the user/AT&T customer to change the DNS server from the one AT&T gives you to one of your own choosing---that's faster. Anyone know of a solution (other then switching ISP's) ???

Can you do a similar video, but for Mac computers?

@LironSegev

Жыл бұрын

Sorry my I have no Mac products

so good advice i sent to my parents

@LironSegev

Жыл бұрын

Protect the parents at all costs!!!

I see you promote System Mechanic but why won't it allow you to install it if you already have Norton on your system? Any way to bypass that somehow or does Norton do everything that SM does? Thanks.

@LironSegev

Жыл бұрын

Sorry but no idea. But reach out to them and see what they say.

I usually enjoy your videos. . . But I am a bit leary of System Mechanic. It has been around for a while but . . . do we NEED it in this day and age? Otherwise, I always learn something from your videos. Cheers!

i have an antivirus the first one i would like to activate... but i just dont feel safe changing my admininstator things plus the second idk.... i just dont feel safe

@samp883

Жыл бұрын

i mean i have norton (i think its also called life lock)

As always Liron, i learned something new... 👍 BUT about the DNS ? What if you are running VPN, which has its own DNS...? Please lecture me, thank you kindly... - Stay Blessed - - Peace - 🙏❤✌

@LironSegev

Жыл бұрын

If you use a VPN, I am not sure how much of an impact these DNS will have.

@madeforstreets

Жыл бұрын

@@LironSegev So don't set DNS to Google or Cloud, keep it private, or automatic, also on phone, is that about right sir...?

@LironSegev

Жыл бұрын

A VPN will (or should) take care of that for you.

Let's change it right now

For Windows 11 restore point I get THREE CHOICES, what are the other two?: Protection Settings Available Drives Protection OS (C:) (System) On WINRETOOLS Off Image Off Configure restore settings, manage disk space, and delete restore points. Configure... Create a restore point right now for the drives that have system protection tumed on. Create...

Great videos! I have watched 4-5 of your videos so far on security and revealing all the flaws from password security to Two-Factor Authentication, to DNS security, but so far most of your videos are mainly based on Windows computers, and you are showing people what to do on Windows based computers. Do you have any security advice and videos to give to people who have Mac computers as well?

@LironSegev

Жыл бұрын

Appreciate you being here 🔥 unfortunately I don't use any Apple products so no at the moment

@weldonf4081

Жыл бұрын

No problem, some of your advice I can still apply to my iMac and MacBook Pro. Thanks for getting back to me!!

Already had my DNS set to Cloudflare

@LironSegev

Жыл бұрын

awesome!

Sorry for this ultra-basic question lol, but if you're using a secondary user account, what can you no longer access? and if you do need admin privileges for something, how do you switch to the admin account? 🤔

@LironSegev

Жыл бұрын

not basic at all! When you have an Admin account you can make changes to the system. When you use the local standard account if something needs to make a change, it will prompt you for the password. So let's say you are installing a new app, you will just need to enter the Admin password. The usual stuff will just work.

@jonbass1611

Жыл бұрын

@@LironSegev Ah, I get it. Thank you for the info, I really appreciate it! 🙂