Hard_Configurator - Windows Hardening Configurator

[oldschool]

H_C works as usual.

It turns out it was user error. I forgot to remove LNK files from designated file types. I have to get re-familiarized with SRP.

 

[Kerneli]

Is there Windows 11 23H2 support coming? Or what else would be good free alternative besides Hard configurator as cannot use it with my Win11 23H2...

 

[Andy Ful]

Is there Windows 11 23H2 support coming? Or what else would be good free alternative besides Hard configurator as cannot use it with my Win11 23H2...

H_C works on Windows 11 23H2.

 

[Azazel]

Hello @Andy Ful ,
I have a question.
Is "Block executable files from running unless they meet a prevalence, age, or trusted list criteria" a robust protective rule or are there non-sophisticated ways it can be easily bypassed?

 

[oldschool]

Is "Block executable files from running unless they meet a prevalence, age, or trusted list criteria" a robust protective rule

Yes it is. It's equivalent to Avast hardened mode.

 

[n8chavez]

Hello @Andy Ful ,
I have a question.
Is "Block executable files from running unless they meet a prevalence, age, or trusted list criteria" a robust protective rule or are there non-sophisticated ways it can be easily bypassed?

I've found that particular option being more trouble then it's worth; in essence creating a lockdown mode where EVERYTHING new-ish needs to be whitelisted in order to run.

 

[oldschool]

I've found that particular option being more trouble then it's worth; in essence creating a lockdown mode where EVERYTHING new-ish needs to be whitelisted in order to run.

OTOH, I've had no problems whatsoever. It just depends on one's situation.

 

[n8chavez]

Really? Well, curiouser and curiouser. I've had nothing but problems. But I always automate things via scripting and always update my software.

 

[Andy Ful]

Really? Well, curiouser and curiouser. I've had nothing but problems. But I always automate things via scripting and always update my software.

Yes, It can block new installations/updates with low prevalence. The block disappears after about 2 days. One can use that ASR rule set to Warn to avoid most problems.
Of course, it will be inconvenient when one has many applications that auto-update frequently. That is why it is not included in ConfigureDefender HIGH settings.

 

[n8chavez]

Yes, It can block new installations/updates with low prevalence. The block disappears after about 2 days. One can use that ASR rule set to Warn to avoid most problems.
Of course, it will be inconvenient when one has many applications that auto-update frequently. That is why it is not included in ConfigureDefender HIGH settings.

Don't get me wrong; I'm not in any way, shape or form saying that you or Hard Configurator is bad. I just mean that particular ASR option doesn't fit my needs, for reasons you mentioned. My opinion, this or @danb's Configure Defender should be on every system without exception.

 

[Andy Ful]

I just mean that particular ASR option doesn't fit my needs, for reasons you mentioned.

Yes, I know.
Anyway, I do not think that you need H_C or ConfigureDefender. For many MT members, any advanced protection is a kind of insurance, learning, or fun.