Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Other security for Windows, Mac, Linux
NVT SysHardener: Harden Windows Settings
Message
<blockquote data-quote="NoVirusThanks" data-source="post: 717175" data-attributes="member: 68429"><p>Have added an option to change the PowerShell Execution Policy on current user (unchecked by default):</p><p></p><p>[ATTACH=full]181938[/ATTACH] </p><p></p><p>I've added also possibility to change it to Unrestricted\Bypass\Undefined.</p><p></p><p>What do you think about it? Better to allow the user to change it with all available options or just have a single checkbox:</p><p></p><p>Set PowerShell Execution Policy to Restricted for Current User</p><p></p><p>The "Restricted" is the default option (and more secure), more info here:</p><p><a href="https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-6" target="_blank">Set-ExecutionPolicy (Microsoft.PowerShell.Security)</a></p><p></p><p>Will add also 3 new options to disable these other Windows services (unchecked by default):</p><p></p><p>Turn Off HomeGroup Provider Service</p><p>Turn Off Program Compatibility Assistant (PCA) Service</p><p>Turn Off Windows Search Service</p><p></p><p>What do you think?</p><p></p><p>[USER=70202]@Daviworld[/USER]</p><p></p><p>You may want to apply SysHardener tweaks once and it should be fine.</p><p></p><p>In case Windows auto-upgrades to a major version, it may happen that it changes some tweaks made by SysHardener (i.e disabled services).</p><p></p><p>So you'll need to re-apply SysHardener tweaks.</p><p></p><p>[USER=4011]@blueblackwow65[/USER]</p><p></p><p>Yes, with default settings it should be fine and not cause issues.</p><p></p><p>[USER=46633]@Darrin[/USER]</p><p></p><p>We'll need to discuss about it (not a priority for now).</p><p></p><p>[USER=58943]@ForgottenSeer 58943[/USER]</p><p></p><p>About disabling DNSClient, can add it as disabled by default.</p><p></p><p>* I've read somewhere that if disabled, it may create issues with some firewall software (don't remember the link).</p><p></p><p>About UserDataSvc\UnistoreSvc, will check them later.</p></blockquote><p></p>
[QUOTE="NoVirusThanks, post: 717175, member: 68429"] Have added an option to change the PowerShell Execution Policy on current user (unchecked by default): [ATTACH=full]181938[/ATTACH] I've added also possibility to change it to Unrestricted\Bypass\Undefined. What do you think about it? Better to allow the user to change it with all available options or just have a single checkbox: Set PowerShell Execution Policy to Restricted for Current User The "Restricted" is the default option (and more secure), more info here: [URL="https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-6"]Set-ExecutionPolicy (Microsoft.PowerShell.Security)[/URL] Will add also 3 new options to disable these other Windows services (unchecked by default): Turn Off HomeGroup Provider Service Turn Off Program Compatibility Assistant (PCA) Service Turn Off Windows Search Service What do you think? [USER=70202]@Daviworld[/USER] You may want to apply SysHardener tweaks once and it should be fine. In case Windows auto-upgrades to a major version, it may happen that it changes some tweaks made by SysHardener (i.e disabled services). So you'll need to re-apply SysHardener tweaks. [USER=4011]@blueblackwow65[/USER] Yes, with default settings it should be fine and not cause issues. [USER=46633]@Darrin[/USER] We'll need to discuss about it (not a priority for now). [USER=58943]@ForgottenSeer 58943[/USER] About disabling DNSClient, can add it as disabled by default. * I've read somewhere that if disabled, it may create issues with some firewall software (don't remember the link). About UserDataSvc\UnistoreSvc, will check them later. [/QUOTE]
Insert quotes…
Verification
Post reply
Top