Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 707116" data-attributes="member: 32260">But in the first stage, I would like to make a GUI switch for newbies:Default Deny (ON / OFF)This switch will only change SRP Default Protection Level to Unrestricted (OFF)&nbsp; or restore the default-deny setting&nbsp; (ON --&gt; Basic User or Disallowed). The user will not have to log-off, the setting is applied immediately..In the OFF setting, the protection will allow anything, except when something is explicitly disallowed in Hard_Configurator. If Hard_Configurator was set to the recommended settings, then switching OFF still protects Windows folder and shortcuts, and also will block: PowerShell script execution, Windows Script Host, Remote Access, 16-bit applications, Shell Extensions, Cached Logons. But the user will be able to run almost any file (EXE, COM, MSI, SCR, BAT, CMD, HTA, etc.)..The Default Deny (ON / OFF) switch cannot be used for disabling all Hard_Configurator protection, but may be used by the newbie when the installation of the application cannot be made via &#039;Run As SmartScreen&#039;.[USER=58132]@Daniel Keller[/USER] did you need something more than that when you troubleshoot your computers? For example, the option to allow scripts or Remote Access?</blockquote>

[QUOTE="Andy Ful, post: 707116, member: 32260"] But in the first stage, I would like to make a GUI switch for newbies: [COLOR=#00b359][B]Default Deny (ON / OFF)[/B][/COLOR] This switch will only change SRP Default Protection Level to Unrestricted ([B][COLOR=#00b359]OFF[/COLOR][/B]) or restore the default-deny setting ([COLOR=#00b359][B]ON[/B][/COLOR] --> Basic User or Disallowed). The user [B]will not have to log-off[/B], the setting is applied immediately. . In the [B][COLOR=#00b359]OFF[/COLOR][/B] setting, the protection will allow anything, except when something is explicitly disallowed in Hard_Configurator. [B]If Hard_Configurator was set to the recommended settings, then switching [COLOR=#00b359]OFF[/COLOR] still protects Windows folder and shortcuts, and also will block: PowerShell script execution, Windows Script Host, Remote Access, 16-bit applications, Shell Extensions, Cached Logons.[/B] But the user will be able to run almost any file (EXE, COM, MSI, SCR, BAT, CMD, HTA, etc.). . The [B][COLOR=#00b359]Default Deny (ON / OFF)[/COLOR][/B] switch cannot be used for disabling all Hard_Configurator protection, but may be used by the newbie when the installation of the application cannot be made via 'Run As SmartScreen'. [USER=58132]@Daniel Keller[/USER] did you need something more than that when you troubleshoot your computers? For example, the option to allow scripts or Remote Access? [/QUOTE]

Verification