Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 776538" data-attributes="member: 32260">The profile &quot;Windows_10_Recommended_Enhanced&quot; blocks also remote features: Remote Desktop, Remote Assistance (solicited and unsolicited), Remote Shell Access, Remote Registry Access. Those features are blocked by the standard recommended settings, too.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />Many your registry tweaks are included in Hard_Configurator, because you wrote about them many times and I was one of the careful readers. I checked them by myself and found useful.:emoji_ok_hand:Also SRP settings are similar to yours. At present, H_C uses Default Security Level = Disallowed, but it works similarly to preferred by you&nbsp; &#039;Basic User&#039; on Windows 7, 8, 8.1, and 10. The only important difference is the lack of extended protection for CMD Shell and Windows Script Host in &#039;Basic User&#039; setting. So when using &#039;Basic User&#039; in H_C, the VBScript and JScript scripts have to be blocked by &lt;Disable Win. Script Host&gt; option. This option is not related to SRP. It blocks script execution also as administrator and has very poor info in the Windows Event Viewer. Another possibility is blocking the script sponsors by SRP (wscript.exe and cscript.exe). Both &lt;Disable Win. Script Host&gt; and blocking sponsors do not allow whitelisting the particular scripts, so I prefer SRP Default Security Level = Disallowed.When using in H_C the setting Default Security Level = Disallowed, the Windows Script Host is blocked by SRP as standard user only, the Log includes more information about blocked events, and the user can whitelist the particular scripts.</blockquote>

[QUOTE="Andy Ful, post: 776538, member: 32260"] The profile "Windows_10_Recommended_Enhanced" blocks also remote features: Remote Desktop, Remote Assistance (solicited and unsolicited), Remote Shell Access, Remote Registry Access. Those features are blocked by the standard recommended settings, too.:giggle:(y) Many your registry tweaks are included in Hard_Configurator, because you wrote about them many times and I was one of the careful readers. I checked them by myself and found useful.:emoji_ok_hand: Also SRP settings are similar to yours. At present, H_C uses Default Security Level = Disallowed, but it works similarly to preferred by you 'Basic User' on Windows 7, 8, 8.1, and 10. The only important difference is the lack of extended protection for CMD Shell and Windows Script Host in 'Basic User' setting. So when using 'Basic User' in H_C, the VBScript and JScript scripts have to be blocked by <Disable Win. Script Host> option. This option is not related to SRP. It blocks script execution also as administrator and has very poor info in the Windows Event Viewer. Another possibility is blocking the script sponsors by SRP (wscript.exe and cscript.exe). Both <Disable Win. Script Host> and blocking sponsors do not allow whitelisting the particular scripts, so I prefer SRP Default Security Level = Disallowed. [B]When using in H_C the setting Default Security Level = Disallowed, the Windows Script Host is blocked by SRP as standard user only, the Log includes more information about blocked events, and the user can whitelist the particular scripts.[/B] [/QUOTE]

Verification