Hard_Configurator - Windows Hardening Configurator

[Back3]

If I activate only the Firewall and the Windows Hardening sections in H_C, do I get about the same protection that I have with SysHardener ?

 

[shmu26]

If I activate only the Firewall and the Windows Hardening sections in H_C, do I get about the same protection that I have with SysHardener ?

By the Windows Hardening sections, I assume you mean the options on the right side, which are not related to SRP?
No, you will not get the same level of protection. SysHardener will block script files of various types, and to get that protection in H_C, you need to use SRP (the options on the left side)

 

[Andy Ful]

If I activate only the Firewall and the Windows Hardening sections in H_C, do I get about the same protection that I have with SysHardener ?

As an addition to the post of @shmu26, the H_C FirewallHardening blocks more LOLBins.
If you want to get something similar to SysHardener (but stronger) you can use H_C and load the predefined profile: Windows_10_Basic_Recommended_Settings. This profile allows EXE and MSI files, so you probably will not see a difference in daily work.

 

[shmu26]

you probably will not see a difference in daily work.

H_C is much easier to switch on and off, in case you need to run a script file for a mainenance task or whatever, so that might be a difference.

 

[Burrito]

Nice cred and mention for Andy here. I'm surprised this has not already been posted.... or did I miss it...

Windows 10 Defender's hidden features revealed by this free tool

Windows 10's built-in Microsoft Defender antivirus solution has many advanced hidden features that allow you to customize how the security software works. Unfortunately, most people do not know these settings exist or even how to access them.

www.bleepingcomputer.com

 

[Gandalf_The_Grey]

Nice cred and mention for Andy here. I'm surprised this has not already been posted.... or did I miss it...

Windows 10 Defender's hidden features revealed by this free tool

Windows 10's built-in Microsoft Defender antivirus solution has many advanced hidden features that allow you to customize how the security software works. Unfortunately, most people do not know these settings exist or even how to access them.

www.bleepingcomputer.com

Yes, great to see more recognition of his amazing work
It was already posted in the Configure Defender thread:

ConfigureDefender utility for Windows 10

What triggers this command-line? Is it related to the WD task in the Task Scheduler? Look at the folder: C:\ProgramData\Microsoft\Windows Defender\Platform\ Is the version 4.18.2004.6-0 the last one? I have got it 21.04.2020, and my current version is 4.18.2005.4-0. Please try the command-line...

malwaretips.com

ConfigureDefender utility for Windows 10

You will probably see several instances of ConfigureDefender and maybe some other entries of unused/uninstalled applications. Nada. Nothing. Maybe it is my system configuration ... but it doesn't matter.

malwaretips.com

 

[oldschool]

I've been reading all of @Andy Ful 's recommended links in H_C manual and I'm wanting to ask some general questions about SRP, except I'm still trying to wrap my head around some of the manual's explanation of H_C's inner mechanics. I guess it will just have to keep percolating in this old brain of mine ...

 

[blackice]

I've been reading all of @Andy Ful 's recommended links in H_C manual and I'm wanting to ask some general questions about SRP, except I'm still trying to wrap my head around some of the manual's explanation of H_C's inner mechanics. I guess it will just have to keep percolating in this old brain of mine ...

My brain is young still...at least by numbers, and that stuff makes my head spin. I won’t implement SRP default deny until I understand what I’m doing. So it could be a while. Maybe I need the new casual user mode.

 

[oldschool]

My brain is young still...at least by numbers, and that stuff makes my head spin. I won’t implement SRP default deny until I understand what I’m doing. So it could be a while. Maybe I need the new casual user mode.

Well, I have W10 Pro so I'm learning how to deploy with GPO plus @Andy Ful 's expertise, but without his app. Just for the fun of it!

 

[Andy Ful]

I've been reading all of @Andy Ful 's recommended links in H_C manual and I'm wanting to ask some general questions about SRP,...

You are on the right thread to ask.. and you have the right tool (H_C) to check the answers.
This probably will improve both your knowledge about SRP and the H_C manual.

 

[Andy Ful]

Well, I have W10 Pro so I'm learning how to deploy with GPO plus @Andy Ful 's expertise, but without his app. Just for the fun of it!

It is possible for a simple SRP setup. The more complex setups require several hundreds of SRP rules.

 

[ErzCrz]

I just set it to recommended settings for all three elements and let it do it's thing. I can learn about tweaking it when I get time to have a better read of the manual.

 

[oldschool]

It is possible for a simple SRP setup.

My setup is simple, more like @Windows_Security's Windows Pro Owner? Use SRP

The more complex setups require several hundreds of SRP rules.

As I got into this I realized more fully how much work you put into H_C. The casual user might think otherwise, that it's just a simple app. I imagine you had to do a lot of coding, and maybe hundreds of rules?

 

[Andy Ful]

My setup is simple, more like @Windows_Security's Windows Pro Owner? Use SRP


As I got into this I realized more fully how much work you put into H_C. The casual user might think otherwise, that it's just a simple app. I imagine you had to do a lot of coding, and maybe hundreds of rules?

Yes. But, I like the final effect.

 

[paulderdash]

Andy, when do you expect the latest H_C beta to be good to go?

 

[Andy Ful]

Andy, when do you expect the latest H_C beta to be good to go?

It is already good to go. Simply, there can be some unimportant bugs. There were also some, unimportant bugs in the version 5.0.0.0, that were corrected in the beta. Please read about the new <Update Mode>, <Harden Archives>, and <Harden Email Clients> features, because they make the Recommended Settings in the beta different from those in the ver. 5.0.0.0.

 

[Freki123]

Hi Andy atm I'm trying the new 5.1. beta and so far no problems at all. Nice work.
When I looked in the manual I saw that you also mentioned "Font rescaling issues". A few month ago some kind soul told me that I could also try to fix it another way while still having my custom 125% for all other stuff. Maybe you could add that for other people desperate to stay at 125% while using H_C. I just used a picture since my explanation would only be more confusing (You have to try if application, system or system enhanced gives the best result). Not sure if it's only an windows 10 Pro option?

 

[Andy Ful]

Hi Andy atm I'm trying the new 5.1. beta and so far no problems at all. Nice work.
When I looked in the manual I saw that you also mentioned "Font rescaling issues". A few month ago some kind soul told me that I could also try to fix it another way while still having my custom 125% for all other stuff. Maybe you could add that for other people desperate to stay at 125% while using H_C. I just used a picture since my explanation would only be more confusing (You have to try if application, system or system enhanced gives the best result). Not sure if it's only an windows 10 Pro option?
View attachment 240935

On my computer, this spoils the display. So, it may work only on some machines.

 

[plat]

Just for the fun of it!

omG, oldschool called messing around with group policy "fun." What's next?

 

[Freki123]

On my computer, this spoils the display. So, it may work only on some machines.

So you start with an spoiled display which gets worse after these settings?
For me it changes a spoiled display to an normal looking one.