Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 817761" data-attributes="member: 32260">You can configure CF with CS settings (several additional tweaks are required) in a way that allows skipping H_C or VS. But, this can produce some incompatibilities with Windows Updates/Upgrades, especially on Windows 10. The problem is that CF can block/restrict both processes with medium and high integrity levels (standard and admin rights). But, H_C is set to block only processes with medium integrity level (standard rights). So, H_C can block safely much more processes without a visible impact on the system. This is optimal in the home environment, because all new processes (also the malware) can be started by the user only with standard rights (things are different in Enterprises). If the unsafe processes are properly restricted, then the malware cannot bypass UAC and elevate even on Admin account.Anyway, you can safely uninstall H_C because it uses Windows policies which are not changed by CF settings. Both H_C and CF can coexist together, but in my opinion, such setup will be too complex for most users, because many security features are doubled.Furthermore, on Windows 10, some H_C executables have to be specially configured in CF to apply forced SmartScreen.</blockquote>

[QUOTE="Andy Ful, post: 817761, member: 32260"] You can configure CF with CS settings (several additional tweaks are required) in a way that allows skipping H_C or VS. But, this can produce some incompatibilities with Windows Updates/Upgrades, especially on Windows 10. The problem is that CF can block/restrict both processes with medium and high integrity levels (standard and admin rights). But, H_C is set to block only processes with medium integrity level (standard rights). So, H_C can block safely much more processes without a visible impact on the system. This is optimal in the home environment, because all new processes (also the malware) can be started by the user only with standard rights (things are different in Enterprises). If the unsafe processes are properly restricted, then the malware cannot bypass UAC and elevate even on Admin account. Anyway, you can safely uninstall H_C because it uses Windows policies which are not changed by CF settings. Both H_C and CF can coexist together, but in my opinion, such setup will be too complex for most users, because many security features are doubled. Furthermore, on Windows 10, some H_C executables have to be specially configured in CF to apply forced SmartScreen. [/QUOTE]

Verification