Hard_Configurator - Windows Hardening Configurator

[Andy Ful]

The firewall.log contained four identical "rundll" entries. After reinstalling H_C, the "blocked events" button now displays "blocked events not found for the current blocklist."

That is normal. Due to blocked connections of Windows telemetry scheduled tasks, a few RunDLL32 entries a day can usually occur (depending on telemetry settings).
Did you figure out what blocked Notepad?

A peculiar problem I'm experiencing resolves when I change ConfigureDefender from High to Default.
"Websites and even Edge settings frequently won't load unless I switch to a new tab and then back."

The Network Protection setting can cause this for some websites (although I have never seen such behavior). This can also be caused by conflicts of Network Protection with some web browser extensions or VPN.
I do not think that ConfigureDefender settings can impact loading Edge settings (except web browser extensions). This can be a random correlation. Is this effect strictly connected with HIGH settings? Which settings are affected?

 

[rashmi]

I didn't check what blocked Notepad. Reinstalling H_C solved the issue.

I use High mode and didn't check with other modes. I disabled network protection and set the cloud level to default and the time limit to 10 seconds, which didn't resolve the problem. Disabling extensions also didn't work. I simply reverted to the default mode with ConfigureDefender to resolve the issue.

 

[Andy Ful]

I use High mode and didn't check with other modes. I disabled network protection and set the cloud level to default and the time limit to 10 seconds, which didn't resolve the problem.

Did you restart Windows after disabling Network Protection?

I simply reverted to the default mode with ConfigureDefender to resolve the issue.

Does the Edge problem occur on children's machines?

 

[rashmi]

It appears your tools are not the cause of the problem.

I again encountered the issue. It's a strange problem arising intermittently. I tried changing the DNS, using the ISP DNS, connecting to 5 GHz and 2 GHz, browsing InPrivate, rebooting the router, and checking for packet loss, but could not find the root of the problem.

I have a malfunctioning key (the letter autotypes), which I "disabled" using SharpKeys. I noticed when I use the "type key" in SharpKeys, it sometimes automatically displays "disabled key" instead of a blank window. It means the "disabled key" is active or autopressing. Instead of disabling it, I mapped the malfunctioning key to a damaged key on the system. It blocked the autopressing, and the browser problem also resolved. Let's see…

 

[Online_Sword]

Hi @Andy Ful ,

I recently started using Hard_Configurator 7.0.0.1. After installing it and applying the recommended settings, I found that I can no longer enter LaTeX‐style formulas in Microsoft Word as before. For example, in Word’s equation editor, typing \sum and then pressing the spacebar would normally convert it into a Σ (summation) symbol. But after running Hard_Configurator, pressing space brings up the following error dialog (translated into English):

“The function you are attempting to run contains macros or content that requires macro language support. When this software was installed, you (or your administrator) chose not to install support for macros or controls.”



Although the Σ symbol still appears, having to dismiss this dialog every time is extremely inconvenient when entering many symbols. Could you please advise me on which setting to change so that Word no longer displays this pop-up? I’m using Word Home Edition 2019.

Thanks in advance!

 

[Andy Ful]

“The function you are attempting to run contains macros or content that requires macro language support. When this software was installed, you (or your administrator) chose not to install support for macros or controls.”

View attachment 288669

You have to set <Documents Anti-Exploit> to "Adobe". This will allow VBA macro support.
When macro support is enabled, you must be cautious with MS Office documents downloaded from the Internet or USB/flash drives.
It is recommended to enable ASR rules in Microsoft Defender.

 

[Online_Sword]

View attachment 288670

You have to set <Documents Anti-Exploit> to "Adobe". This will allow VBA macro support.
When macro support is enabled, you must be cautious with MS Office documents downloaded from the Internet or USB/flash drives.
It is recommended to enable ASR rules in Microsoft Defender.

Thanks! I have enabled the VBA macro support and changed the protection level of ConfigureDefender from Default to High (to enable the ASR rules). Now the equation editor works very well

 

[rashmi]

Am I right in saying that H_C installs for "All Users"? Is a per-user installation possible?

 

[Digmor Crusher]

Am I right in saying that H_C installs for "All Users"? Is a per-user installation possible?

I'm not sure but I highly doubt it.

 

[rashmi]

I'm not sure but I highly doubt it.

I currently don't have access to the systems with H_C; otherwise, I would have checked it myself.

 

[Digmor Crusher]

I currently don't have access to the systems with H_C; otherwise, I would have checked it myself.

Andy will tell us.

 

[Andy Ful]

Is a per-user installation possible?

Mainly no.

Some settings applied via DocumentsAntiExploit tool are user dependent:

 

[Parkinsond]

No, except for some settings applied via the DocumentsAtiExploit tool.

Is DocumentsAtiExploit tool still needed if using Office suite other than of MS?

 

[Andy Ful]

Is DocumentsAtiExploit tool still needed if using Office suite other than of MS?

No, it protects MS Office and Adobe Acrobat (most exploited in the wild).

 

[Andy Ful]

Hard_Configurator ver. 7.0.0.2

https://github.com/AndyFul/Hard_Configurator/raw/refs/heads/master/Hard_Configurator_setup_7.0.0.2.exe

• The new version can also be updated by using the < Update H_C > button.
• Added some anti-tampering improvements (automatically applied after running).

 

[rashmi]

H_C, CD, and FH default or recommended settings.

I installed several programs, including Filmora's online installer and VLC 4's MSI installer, from the Downloads folder using the Install By SmartScreen feature. All programs installed and opened with no blocks or issues.

The VLC MSI installation showed an error. I added the installer to the "Whitelist By Path" section, but the VLC installation still showed the error. With "Run as administrator," I could install VLC successfully. I then removed the MSI installer from the whitelist. Now, I can double-click and run the MSI installer with no blocks, which is not the case with the EXE installers.

 

[Andy Ful]

H_C, CD, and FH default or recommended settings.

The VLC MSI installation showed an error.

Where did you find the MSI installer? I could only find the EXE installers (can be installed with no issues via "Install By SmartScreen").

 

[Andy Ful]

I finally found the MSI version. There is a bug in the MSI installer when it attempts to uninstall the older version from Program Files (the issue is unrelated to H_C). There is no problem when the previous version was installed for the current user.

Post edited.

 

[rashmi]

@Andy Ful, My question was, why does double-clicking to run the MSI installer work after VLC installation, but EXE installers still trigger the "Your organization..." alert?

 

[Andy Ful]

@Andy Ful, My question was, why does double-clicking to run the MSI installer work after VLC installation, but EXE installers still trigger the "Your organization..." alert?

After successful installation, the MSI VLC installer is copied to the "c:\Windows\Installer\" folder under a random name. When you try to run the original MSI VLC installer from the Downloads folder, MSI checks if the binary copy is present. If it is, SRP does not block the reinstallation. If not, the installation is blocked.