Hard_Configurator - Windows Hardening Configurator

[Andy Ful]

Hello all, since Windows 11 IoT Enterprise LTSC has recently been available I was wondering if I can use Hard Configurator on that OS.
Has anybody tried it already? Thanks

Do you use Windows 11 IoT Enterprise LTSC as a home user?
H_C restricts scripting, remote features, and SMB protocols - such a setup can be inconvenient/unuseful in the Enterprise environment.

 

[Kwan ST]

Do you use Windows 11 IoT Enterprise LTSC as a home user?
H_C restricts scripting, remote features, and SMB protocols - such a setup can be inconvenient/unuseful in the Enterprise environment.

I was thinking about using as home user, internet and media consumption, nothing fancy.

 

[Andy Ful]

I was thinking about using as home user, internet and media consumption, nothing fancy.

H_C should work as usual. I can test it if there is an ISO available.

 

[Kwan ST]

H_C should work as usual. I can test it if there is an ISO available.

Thanks, you got PM

 

[Kwan ST]

Update, I installed successfully hard configurator on Windows 11 Enterprise LTSC IoT on my laptop and it works. However, I didn't like the confusing interface so I reverted back to Windows 10 Pro. Thank you Andy for the useful software and your help

 

[Andy Ful]

The H_C GUI is adjusted for home administrators. It looks confusing for most people who are used to standard menu-based applications.
The GUI is like an airplane control panel for a pilot. It requires some learning/training. After running H_C, all settings are visible at one glance and easily accessible (mostly by one click), so I will not change it. Furthermore, this kind of GUI is a good barrier for inexperienced users who mainly should not use H_C. Of course, such a barrier can sometimes discourage experienced users, but that is an acceptable cost for me.
The opposite of the H_C is WHHLight. It has a simplistic GUI, with only a few possible configurations, compared to several hundred (sensible) configurations of H_C.

 

[Kwan ST]

The H_C GUI is adjusted for home administrators. It looks confusing for most people who are used to standard menu-based applications.
The GUI is like an airplane control panel for a pilot. It requires some learning/training. After running H_C, all settings are visible at one glance and easily accessible (mostly by one click), so I will not change it. Furthermore, this kind of GUI is a good barrier for inexperienced users who mainly should not use H_C. Of course, such a barrier can sometimes discourage experienced users, but that is an acceptable cost for me.
The opposite of the H_C is WHHLight. It has a simplistic GUI, with only a few possible configurations, compared to several hundred (sensible) configurations of H_C.

Clarification, I didn't like win 11 interface, not H_C. Currently I'm installing Win 10 Enterprise LTSC IoT on my laptop

 

[Andy Ful]

Clarification, I didn't like win 11 interface, not H_C.

Ha, ha. This is an uncommon situation. Most people would probably skip H_C while keeping Windows 11.

 

[Andy Ful]

H_C should work as usual. I can test it if there is an ISO available.

Both H_C and WHHLight works without any issues.

 

[Andy Ful]

Hard_Configurator ver. 7.0.0.0

https://github.com/AndyFul/Hard_Configurator/raw/master/Hard_Configurator_setup_7.0.0.0.exe

1. All executables are signed with a new digital certificate.
2. Added conhost.exe to the FirewallHardening BlockList.
3. Added the second setting to <Block AppInstaller>. It allows only those APPX and MSIX packages that are signed by Microsoft Store.
4. Minor GUI changes in ConfigureDefender (mouse wheel scrolling, buttons design).
5. Adjusted code to work with Windows Hybrid Hardening.

The update to the new version can be done using the <Update H_C> black button on the application's main Window.
The new version can be installed over the previous one.

 

[simmerskool]

what "scares" about H_C and your other GREAT software, I end up with questions about compatibility if I'm running anything other than MS Defender. Is that more or less correct, ie, they are designed to run with MS Defender; otherwise, you need a deeper understanding of what to pair with what... yes?

 

[Andy Ful]

what "scares" about H_C and your other GREAT software, I end up with questions about compatibility if I'm running anything other than MS Defender. Is that more or less correct, ie, they are designed to run with MS Defender; otherwise, you need a deeper understanding of what to pair with what... yes?

No.
H_C Recommended Settings and DocumentsAntiExploit tool can work with any AV. For example, a special setting profile is available for Avast AV with Hardened Mode.
FirewallHardening works with several AVs that use Windows Firewall. Only a few Internet Suites disable Windows Firewall.
ConfigureDefender is used in Microsoft Defender because default settings lack some important features activated by default in the top Internet Suites.

Anyway, using H_C is not recommended without reading the help files and some learning. If the help files are hard to understand, it is a sign that the user should not use H_C.

 

[ErzCrz]

Hard_Configurator ver. 7.0.0.0

https://github.com/AndyFul/Hard_Configurator/raw/master/Hard_Configurator_setup_7.0.0.0.exe

1. All executables are signed with a new digital certificate.
2. Added conhost.exe to the FirewallHardening BlockList.
3. Added the second setting to <Block AppInstaller>. It allows only those APPX and MSIX packages that are signed by Microsoft Store.
4. Minor GUI changes in ConfigureDefender (mouse wheel scrolling, buttons design).
5. Adjusted code to work with Windows Hybrid Hardening.

The update to the new version can be done using the <Update H_C> black button on the application's main Window.
The new version can be installed over the previous one.

Nice one I'd test it out but not sure how it'd work with CyberLock installed. Anyway, your projects are awesome.

 

[Andy Ful]

Nice one I'd test it out but not sure how it'd work with CyberLock installed. Anyway, your projects are awesome.

It will work, but probably unnecessary with CyberLock.

 

[ErzCrz]

It will work, but probably unnecessary with CyberLock.

Good to know. Agreed, probably overkill but I'll have a look when I get time. Thanks.

 

[simmerskool]

Nice one I'd test it out but not sure how it'd work with CyberLock installed. Anyway, your projects are awesome.

that was sorta (more or less) mas o menos my point post 4191 (& see Andy's) answer... I feel I am not exactly alone

 

[sypqys]

Hello

I cannot open anything on my desktop (shortcut)... ? why ?

Thanks

 

[sypqys]

Hello

I cannot open anything on my desktop (shortcut)... ? why ?

ThanksView attachment 284634View attachment 284635View attachment 284636

I have put Protect Shortcut on ON and it's OK...

 

[sypqys]

https://www.malekal.com/hard-configurator-securiser-windows-10-contre-virus/

tutorial in french well made

 

[Gandalf_The_Grey]

Is there a difference between the Windows 8 Basic Recommended Settings and the Windows 11 SAC ON Recommended Settings profiles if you want to use H_C like SWH on Windows 11?