Hard_Configurator - Windows Hardening Configurator

Back3 said:
I have Eset IS. I just checked Windows firewall and I can see a list created by SysHardener and a list created by H_C.
Click to expand...

H_C firewall rules can only be added/deleted via H_C. SysHardener rules can be deleted in independently via WF, IIRC.
 
  • Like
Reactions: bayasdev, blackice, Vitali Ortzi and 7 others
Back3 said:
If I want to make a backup of all my settings, should I use Save profile or Tools,Manage profiles Backup.
Click to expand...
You can save your settings in the setting profile (<Save Profile> button). If you have many custom whitelisted entries then you can also save them in the whitelist profile (<Save Load> button).
H_C_save.png


You can use <Tools><Manage Profiles Backup> to store all your setting profiles and all your whitelist profiles to one encrypted file. This can be useful if you would need to make a fresh Windows installation.
 
Last edited:
  • Like
  • +Reputation
  • Thanks
Reactions: Mercenary, blackice, simmerskool and 10 others
Bug report, version 5.0.1.1:
I added 3 cmd files by using Whitelist by Hash then after clicking the close button on that window it was not working. Checked task manager and it was using 30% CPU on average. I waited 10 minutes and it was still the same. I had to end the process via task manager. Then opened HC again and this time I didn't even change anything, I just clicked Close button on the main HC window and again same issue. Didn't work and 30% CPU usage. Restarted the system, ran HC but again same issue. While I tried to execute any unsigned exe file, I was getting an error. Something like "Referal... to the server...". I probably saw this line somewhere before, maybe in a HC popup before applying SRP rules. So you're probably aware of the cause of this particular error. I was using "WIndows_10_MT_Windows_Security_hardening" profile with Validate Admin C.S. turned off. Then I tried to uninstall HC but same CPU usage issue occurred again. Restarted the system and installed 5.0.0.0 version, applied the same profile again. The 3 files that I manually whitelisted are still there. Hopefully it was installed successfully over the beta version and found no issue yet.
z.PNG
 
Last edited:
  • Like
  • +Reputation
  • Sad
Reactions: Mercenary, Protomartyr, simmerskool and 10 others
SeriousHoax said:
Bug report, version 5.0.1.1:
I added 3 cmd files by using Whitelist by Hash then after clicking the close button on that window it was not working.
...
Click to expand...
Bug confirmed. The settings are applied correctly to the Windows Registry, but the GUI freezes. After performing log off the account the settings are activated correctly.
I will push the fixed version soon.
 
  • Like
  • Thanks
  • Applause
Reactions: Mercenary, Gandalf_The_Grey, Protomartyr and 9 others
The issue with freezing GUI is somewhat related to displaying the main window when there are some items whitelisted by hash. When the user logs off and then logs on again, it is possible to run the H_C and remove all items whitelisted by hash. After that, everything works well. I am working now on fixing this issue.(y)

Most users cannot probably see this issue, because whitelisting by hash is not common.
 
  • Like
  • +Reputation
Reactions: Mercenary, Gandalf_The_Grey, harlan4096 and 8 others
Andy Ful said:
The issue with freezing GUI is somewhat related to displaying the main window when there are some items whitelisted by hash. When the user logs off and then logs on again, it is possible to run the H_C and remove all items whitelisted by hash. After that, everything works well. I am working now on fixing this issue.(y)

Most users cannot probably see this issue, because whitelisting by hash is not common.
Click to expand...
Oh, I see. Yes not common so lucky found for me. Btw, is the bug present in 5.0 too or only in the beta?
 
  • Like
Reactions: Mercenary, Gandalf_The_Grey, silversurfer and 2 others
Hello. I have a quick observation. I installed some little desktop jewelry which has completely redone the start menu. Now then, at all times I need the command prompt handy. What I found is if I right-click "cmd" there is the context menu choice "Install by SmartScreen." If I click this, the cmd box opens correctly with C:Windows\system32. You probably already explained this and I missed it.

But it's quite a welcome addition, believe me. I now rely on the Start Menu and taskbar 100% of the time and this is most convenient.
 
  • Like
Reactions: Mercenary, Gandalf_The_Grey, harlan4096 and 2 others
plat1098 said:
Hello. I have a quick observation. I installed some little desktop jewelry which has completely redone the start menu. Now then, at all times I need the command prompt handy. What I found is if I right-click "cmd" there is the context menu choice "Install by SmartScreen." If I click this, the cmd box opens correctly with C:Windows\system32. You probably already explained this and I missed it.

But it's quite a welcome addition, believe me. I now rely on the Start Menu and taskbar 100% of the time and this is most convenient.
Click to expand...
What profile do you use?
 
  • Like
Reactions: Mercenary, Gandalf_The_Grey, harlan4096 and 2 others
Well, here is the thing, Andy Ful. There is no profile selected. I just re-loaded the Firewall Hardening rules via the user interface of H_C. Yet this option is now in the context menu. Don't know how it got there but I'm not complaining. Admittedly not familiar with the H_C portion as I've never activated SRP here, just via group policy. The green S, this is via Hard_Configurator, correct?

hcsm.png
 
  • Like
Reactions: oldschool, Gandalf_The_Grey, harlan4096 and 3 others
plat1098 said:
Well, here is the thing, Andy Ful. There is no profile selected. I just re-loaded the Firewall Hardening rules via the user interface of H_C. Yet this option is now in the context menu. Don't know how it got there but I'm not complaining. Admittedly not familiar with the H_C portion as I've never activated SRP here, just via group policy. The green S, this is via Hard_Configurator, correct?

View attachment 239208
Click to expand...
This entry "Install By SmartScreen" was introduced in the beta version as a replacement for "Run As SmartScreen". Could you post here the screenshot of H_C? Depending on the chosen settings, the CMD will be opened with standard rights or with Administrator rights.
 
  • Like
Reactions: oldschool, Gandalf_The_Grey, harlan4096 and 4 others
Andy Ful said:
The issue with freezing GUI is somewhat related to displaying the main window when there are some items whitelisted by hash. When the user logs off and then logs on again, it is possible to run the H_C and remove all items whitelisted by hash. After that, everything works well. I am working now on fixing this issue.(y)

Most users cannot probably see this issue, because whitelisting by hash is not common.
Click to expand...
I fixed the bug. Now I have to recompile H_C and send it to whitelisting by Microsoft, Avast, etc. The corrected beta will be available in a few days.
 
  • Like
  • Applause
  • Thanks
Reactions: oldschool, ErzCrz, Gandalf_The_Grey and 10 others
hcui.PNG

I think I inadvertently clicked on "Switch OFF/ON SRP" but quickly reverted. If I click again on this green button, the message box will say "SRP will be ACTIVATED." Meaning, the SRP should be OFF now. This is definitely not a software to take lightly, so if I did something, I should undo it now.

Edit: Andy Ful, if I simply click on the cmd icon, it opens with Standard rights. If I click on Open via the context menu, cmd will also open as Administrator. Again, this is not the Windows default Start Menu but StartisBack. There is no H_C icon there either, just the generic white rectangle.
 
Last edited:
  • Like
Reactions: oldschool, Gandalf_The_Grey, Andy Ful and 3 others
  • Like
  • Applause
Reactions: Vitali Ortzi, simmerskool, Protomartyr and 10 others
Hard_Configurator beta ver. 5.1.1.1
github.com

AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator
github.com github.com

Fixed the whitelist by hash issue. The H_C NSISS installer is also new and contains both 64-bit and 32-bit installations. Please let me know about any issues. The new files were whitelisted on Saturday night (Microsoft, Avast), so there should not be false positives. Unfortunately, I do not know if Bitdefender and Symantec whitelisted the files, because there is no information about whitelisting from their side.
 
  • Thanks
  • Like
Reactions: South Park, Protomartyr, CyberTech and 10 others

You may also like...