Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Hard_Configurator Tools
Hard_Configurator - Windows Hardening Configurator
Message
<blockquote data-quote="Andy Ful" data-source="post: 969713" data-attributes="member: 32260"><p>Also in the default settings, users are not allowed to run executables from the folders accessible by them from Explorer (in default settings), Edge, email clients, or archiver applications. How would you (as a user) want to run an executable in Recommended Settings?</p><p></p><p></p><p></p><p>That is right. The H_C does not say that you must use Admin or SUA. Using SUA is always more secure (with any security) than using Admin. Anyway, in the home environment on Windows 10 with H_C, the difference is almost negligible. It can be visible very rarely when you will ignore SmartScreen and intentionally bypass the H_C restrictions. SUA is mainly anti-exploit protection which is not so important on Windows 10 at home, except when you use popular & vulnerable applications (not patched).</p><p></p><p></p><p></p><p>That is right. Also using Admin "really makes a difference in easy of use and compatibility". So, if you prefer convenience and well-balanced security then you can choose Admin + H_C. If you want even more security then you can use the H_C on SUA. When you use SUA then you must rarely use Admin. Normally, you will use Admin from SUA when elevating applications, and this will not be disturbed by H_C - you have effectively the same as local H_C and non-restricted Admin.</p><p></p><p></p><p></p><p>Nothing has changed, although the unattended benefit was meant for inexperienced users and not for home administrators. The inexperienced users will not use the Admin account in the way you propose.</p><p>The advantage of local H_C could be visible if several inexperienced users had different accounts on the same computer. With local H_C, you could use different H_C setups for any of them. But usually, people use one computer per one user. For now, I am not going to create a local H_C for a several-user case.</p><p></p><p></p><p></p><p>The block rule is by default and you can remove it by whitelisting. That is how works default-deny.</p><p>If I correctly understand, you do not want unrestricted Admin, but rather default-allow Admin with restrictions only for selected folders. Am I right?</p></blockquote><p></p>
[QUOTE="Andy Ful, post: 969713, member: 32260"] Also in the default settings, users are not allowed to run executables from the folders accessible by them from Explorer (in default settings), Edge, email clients, or archiver applications. How would you (as a user) want to run an executable in Recommended Settings? That is right. The H_C does not say that you must use Admin or SUA. Using SUA is always more secure (with any security) than using Admin. Anyway, in the home environment on Windows 10 with H_C, the difference is almost negligible. It can be visible very rarely when you will ignore SmartScreen and intentionally bypass the H_C restrictions. SUA is mainly anti-exploit protection which is not so important on Windows 10 at home, except when you use popular & vulnerable applications (not patched). That is right. Also using Admin "really makes a difference in easy of use and compatibility". So, if you prefer convenience and well-balanced security then you can choose Admin + H_C. If you want even more security then you can use the H_C on SUA. When you use SUA then you must rarely use Admin. Normally, you will use Admin from SUA when elevating applications, and this will not be disturbed by H_C - you have effectively the same as local H_C and non-restricted Admin. Nothing has changed, although the unattended benefit was meant for inexperienced users and not for home administrators. The inexperienced users will not use the Admin account in the way you propose. The advantage of local H_C could be visible if several inexperienced users had different accounts on the same computer. With local H_C, you could use different H_C setups for any of them. But usually, people use one computer per one user. For now, I am not going to create a local H_C for a several-user case. The block rule is by default and you can remove it by whitelisting. That is how works default-deny. If I correctly understand, you do not want unrestricted Admin, but rather default-allow Admin with restrictions only for selected folders. Am I right? [/QUOTE]
Insert quotes…
Verification
Post reply
Top
