Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Hard_Configurator Tools
Hard_Configurator - Windows Hardening Configurator
Message
<blockquote data-quote="Andy Ful" data-source="post: 1037337" data-attributes="member: 32260"><p><strong>After some investigations, I found out why SRP is turned off after creating the Child Account via Microsoft Family Safety. </strong> <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile :)" loading="lazy" data-shortname=":)" /></p><p></p><p>This issue was discovered several years ago, but no one (as far as I know) could explain it.</p><p>The reason is simple. After creating the Child Account, some AppLocker Policies are added. But, these policies are not introduced via GPO, because AppLocker GPO could not work on Windows Home and Pro until the year 2022.</p><p>Microsoft Family Safety uses AppLocker via MDM WMI Bridge, which is possible with Windows 7+ on all Windows editions (including Windows Home and Pro).</p><p>Unfortunately, after removing the Child Account the AppLocker Policy files are not removed (unpleasant bug)! So, in the case of Family Safety, the issue will persist, until the policy files are manually removed.</p><p>The current beta version of H_C can detect the issue and show the alert about AppLocker Policies. Furthermore, the SRP restrictions from the left panel are deactivated (but not removed from the Registry):</p><p></p><p>[ATTACH=full]274891[/ATTACH]</p><p></p><p>After removing the AppLocker Policies, the H_C left panel is activated again.</p><p></p><p>In fact, this issue is similar to the SRP issue on Windows 11 ver. 22H2. In both cases, it is caused by some AppLocker rules invisible via GPO.</p><p></p><p>Conclusion.</p><p>The SRP issues related to Windows 11 and Family Safety are not entirely new and are not related to the new security features implemented in Windows 11. The roots of these issues are related to AppLocker, and the full functionality of SRP can be easily recovered.</p></blockquote><p></p>
[QUOTE="Andy Ful, post: 1037337, member: 32260"] [B]After some investigations, I found out why SRP is turned off after creating the Child Account via Microsoft Family Safety. [/B] :) This issue was discovered several years ago, but no one (as far as I know) could explain it. The reason is simple. After creating the Child Account, some AppLocker Policies are added. But, these policies are not introduced via GPO, because AppLocker GPO could not work on Windows Home and Pro until the year 2022. Microsoft Family Safety uses AppLocker via MDM WMI Bridge, which is possible with Windows 7+ on all Windows editions (including Windows Home and Pro). Unfortunately, after removing the Child Account the AppLocker Policy files are not removed (unpleasant bug)! So, in the case of Family Safety, the issue will persist, until the policy files are manually removed. The current beta version of H_C can detect the issue and show the alert about AppLocker Policies. Furthermore, the SRP restrictions from the left panel are deactivated (but not removed from the Registry): [ATTACH type="full" alt="1682432194012.png"]274891[/ATTACH] After removing the AppLocker Policies, the H_C left panel is activated again. In fact, this issue is similar to the SRP issue on Windows 11 ver. 22H2. In both cases, it is caused by some AppLocker rules invisible via GPO. Conclusion. The SRP issues related to Windows 11 and Family Safety are not entirely new and are not related to the new security features implemented in Windows 11. The roots of these issues are related to AppLocker, and the full functionality of SRP can be easily recovered. [/QUOTE]
Insert quotes…
Verification
Post reply
Top
