Hard_Configurator - Windows Hardening Configurator

[Andy Ful]

Andy, do you have an ETA for the new version to come out of Beta and become stable?

I am going to push the stable version in June.

 

[jerzy601]

that's great.
I'm looking forward.
maybe you can add Polish it would be easier to understand which ones
settings.

 

[Gangelo]

I am going to push the stable version in June.

Thanks! Looking forward to it.

 

[ForgottenSeer 85179]

I am going to push the stable version in June.

I guess upgrade from latest beta is fine?

 

[Andy Ful]

I guess upgrade from latest beta is fine?

Yes, the stable version 6.0.0.0 will contain some updated executables, and the extended certificate valid to June 2021. But this stable version will be functionally similar to beta 5.1.1.1.

 

[oldschool]

Yes, the stable version 6.0.0.0 will contain some updated executables, and the extended certificate valid to June 2021. But this stable version will be functionally similar to beta 5.1.1.1.

How about the CUP/SSS release?

 

[Andy Ful]

How about the CUP/SSS release?

I have working versions. But, there are no help files yet, and I would like to test them more thoroughly before publishing.

 

[ForgottenSeer 85179]

Latest H_C beta use outdated Autoruns: 13.82.0.0 from February 13, 2018
while it already exist 13.96

Fixes since that release:
13.90
Autoruns now includes Runonce*\Depend entries, adds GPO logon and logoff locations, and fixes a bug in WMI path parsing.
13.95
This Autoruns updates adds support for redirected user Shell folders.
For 13.96 no changelog exist yet

Same also for FullEventLogView: 1.26 is included but latest one is 1.52

 

[Andy Ful]

Latest H_C beta use outdated Autoruns: 13.82.0.0 from February 13, 2018
while it already exist 13.96

Fixes since that release:
13.90
Autoruns now includes Runonce*\Depend entries, adds GPO logon and logoff locations, and fixes a bug in WMI path parsing.
13.95
This Autoruns updates adds support for redirected user Shell folders.
For 13.96 no changelog exist yet

Same also for FullEventLogView: 1.26 is included but latest one is 1.52

I rarely change Autoruns version because the H_C has a special module that works with the older version and may work or not with the new version. The new features are not important for H_C, because the legal applications do no use as many autorun keys as malware. The newest FullEventLogView has some bugs and does not filter properly all events required by H_C. But I plan to update these tools this year.

 

[shmu26]

Hi Andy, I installed Windows 7 yesterday, and then H_C 5.0.0.0.
I put it at recommended settings.
There are items that I pinned to the regular Win7 start menu. Those shortcuts are all blocked. Whitelisting them doesn't work. Even my shortcut to H_C is blocked...

 

[Andy Ful]

Hi Andy, I installed Windows 7 yesterday, and then H_C 5.0.0.0.
I put it at recommended settings.
There are items that I pinned to the regular Windows 7 start menu. Those shortcuts are all blocked. Whitelisting them doesn't work. Even my shortcut to H_C is blocked...

Did you log OFF the account?

 

[shmu26]

Did you log OFF the account?

Yes, this is after a reboot or two.

 

[Andy Ful]

Yes, this is after a reboot or two.

Wow. Something probably interferes with H_C. Could you post the screenshot of the H_C main Window?

 

[shmu26]

 

[Andy Ful]

View attachment 242750

Thanks. Could you please use <Tools> <Restore Windows Defaults> to remove SRP and next run H_C again?

 

[shmu26]

Thanks. Could you please use <Tools> <Restore Windows Defaults> to remove SRP and next run H_C again?

I restored windows default, rebooted, ran H_C, logged off, and now it's the same as before. When I click on the H_C shortcut that I pinned to the Win7 start menu, I get "This program is blocked by group policy"

 

[Andy Ful]

I restored windows default, rebooted, ran H_C, logged off, and now it's the same as before. When I click on the H_C shortcut that I pinned to the Windows 7 start menu, I get "This program is blocked by group policy"

Do the standard shortcuts (made by H_C) work well?
You can whitelist the nonstandard shortcut locations by using:
<Whitelist By Path> <Add Path*Wildcards> and paste the full path of the shortcut.
Other whitelisting methods will always whitelist the target application which can be run by the shortcut, but the shortcut will not be whitelisted.

 

[Andy Ful]

@shmu26
If the path of the shortcut includes the ImplicitAppShortcuts folder, then this folder is whitelisted by default in the H_C ver. 5.1.1.1.

 

[shmu26]

Do the standard shortcuts (made by H_C) work well?
You can whitelist the nonstandard shortcut locations by using:
<Whitelist By Path> <Add Path*Wildcards> and paste the full path of the shortcut.
Other whitelisting methods will always whitelist the target application which can be run by the shortcut, but the shortcut will not be whitelisted.

Thanks, that works

 

[Gandalf_The_Grey]

Website down?

Hard_Configurator – GUI to manage Software Restriction Policy (SRP) and harden Windows

hard-configurator.com