Harden Windows with Hard Configurator (by gHacks)

Av Gurus

Level 29
Thread author
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Sep 22, 2014
1,767
Program made by Andy Ful.
More on that in this forum - HERE


Hard Configurator is a free program for Microsoft Windows operating systems that you may use to harden the operating system and manage software restriction policies.

it is a good idea from a security point of view to harden an operating system after installation or on first run.

One idea behind hardening the system is to restrict services or features that you don't require, another to lock down certain features to improve security.

You may do so using built-in tools or the Windows Registry.

Hard Configurator is a free program for all versions of Windows starting with Windows Vista that adds a graphical user interface for quite a few security related features. It looks a bit like the big brother of Hardentools, another Windows hardening program.

Hard Configurator
hard-configurator.png


The program does not reinvent the wheel, but you may find it easier to use than using the Registry. This is especially true if you need to hunt down the relevant values first before you can even start to change them.

The main interface of the program is without the shadow of the doubt not the prettiest, and some of you may even call it confusing or messy.

The author added help buttons to all core features the program offers, and a button to open the general help for any option that does not have a dedicated help button. The help files displayed a blank window however on a 64-bit version of Windows 10 Pro I tried the application on.

So what can you do with the program?

  1. Enable or disable Software Restriction Policies (SRP) in Windows Home versions.
  2. Change SRP levels, enforcement, and protected extensions.
  3. Whitelist files by path and by hash.
  4. Enable or disable Windows Defender PUA (Potentially Unwanted Application) protection.
  5. Enable or disable untrusted fonts in Windows 10.
  6. Enable or disable execution from removable disks.
  7. Enable or disable the Windows Scripting Host.
  8. Enable or disable PowerShell script execution.
  9. Restrict shortcut execution to select folders.
  10. Hide or unhide "run as administrator".
  11. Force Smartscreeen filter checks for files that are not marked as "from the Internet" on Windows 8 or newer.
  12. Enable or disable Remote Assistance, Remote Shell, or Remote Registry.
  13. Protect writable subfolders in c:\windows.
Buttons are provide to turn all SRP options on or off, and to turn off all restrictions.

As far as the general application layout is concerned, it lists the main options in the second and fifth column, and the values of the entries of these columns in the first and six column.

You may turn features on or off individually. While you can set most using the Registry, it is faster using the program.

The downside is that you don't really see what the program does in the background while you have full control over the process if you do it manually.

One of the interesting features of Hard Configurator is to enable the SmartScreen filter for programs that don't have the "from the web" Alternate Date Stream attached to them.

This ensures that the security feature will check programs that come from removable disks, drives, optical discs, container file formats, or files downloaded using third-party programs.

Hard Configurator ships with a tools section. You may use it to restore Windows defaults, create a system restore point, run the SRP/Scripts eventlog view, or run autoruns: scripts/userSpace.

As always, if you use a program that makes system changes, make sure you run a backup job prior to that so that you can restore the operating system should things go wrong along the process.

Closing Words
Hard Configurator provides you with options to make security related changes to Windows quickly. The program is not the easiest to work with, and the blank help files are somewhat discouraging as well. The program appears to make the right changes though to the Registry.
 

Andy Ful

From Hard_Configurator Tools
Verified
Honorary Member
Top Poster
Developer
Well-known
Dec 23, 2014
8,176
The problem with help files can occur, if Hard_Configurator folder was not copied to Windows directory. I put Installation info on GitHub webpage, but forgot to include it in Hard_Configurator_2.0.1.0.zip . Martin probably thought that Hard_Configurator is fully portable.
Congratulations to Martin - he managed to test Hard_Configurator without help files.:)
 
Last edited:
  • Like
Reactions: Sunshine-boy

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top