Advice Request Possible ways to harden Windows?

[ForgottenSeer 77194]

Apart from disabling macros and remote access, what are other ways to harden windows?

 

[ErzCrz]

Apart from disabling macros and remote access, what are other ways to harden windows?

One of the easiest ways is @Andy Ful 's tools Simple Windows Hardening or Hard_Configurator Hard_Configurator Simple Windows Hardening.

E

 

[ForgottenSeer 77194]

One of the easiest ways is @Andy Ful 's tools Simple Windows Hardening or Hard_Configurator Hard_Configurator Simple Windows Hardening.

E

I am aware of the tool, I am interested in the underlying technologies that are hardened.
For example what windows or application features increases the attack surface and ways to reduce it.
What hardening settings are recommended generally while keeping the OS usable.

 

[Gandalf_The_Grey]

I am aware of the tool, I am interested in the underlying technologies that are hardened.
For example what windows or application features increases the attack surface and ways to reduce it.
What hardening settings are recommended generally while keeping the OS usable.

A suggestion would be to read the Hard_Configurator manual:

Hard_Configurator/Documentation at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator

github.com

There is a lot of information about the different settings.

 

[ForgottenSeer 77194]

A suggestion would be to read the Hard_Configurator manual:

Hard_Configurator/Documentation at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator

github.com

There is a lot of information about the different settings.

Thanks, I will read it.

 

[Kongo]

To reduce the attack surface of your OS you can remove some Windows 10 / 11 apps or of course third-party software that you don't really need. You can also disable AutoPlay, Network Discovery and Windows Update Optimization. All of those settings are not essential and can bear a risk.

 

[Viotto]

I recommend putting all your important files into an encrypted container or partition, using VeraCrypt for example.
You will mount that partition only when needed and this will decrease the chances of suspicious programs to access your important files.
It will also make it easier to backup all your important files, as you will need to copy just the single container file.

I would also suggest to install an Anti-Keylogger program such as KeyScrambler to ensure your PC is not being monitored without your consent.
If a keylogger is installed and it bypasses your antivirus, it is still another layer of protection that you have.

 

[ForgottenSeer 77194]

Thanks, for your suggestions.

 

[show-Zi]

Andy's software is also recommended in terms of learning the reasons for the enhancement.
Increased security is linked to reduced convenience. The important thing is a compromise on how to stay safe while maintaining convenience. Andy's tools have a great balance.

 

[wat0114]

Secondly, the developer is very active in this forum, and it's very easy to get help....

Andy's tools have a great balance.

And I would add: Andy's tools are essentially bug free, no impact on system performance, and rock solid. They just work as advertised

 

[ForgottenSeer 77194]

I will use SWH then.

 

[Back3]

I will use SWH then.

Check that thread...

New Update - Simple Windows Hardening

Post updated in July 2023. SWH ver. 2.1.1.1 - July 2023 (added support for Windows 11 ver. 22H2) https://github.com/AndyFul/Hard_Configurator/raw/master/Simple%20Windows%20Hardening/SimpleWindowsHardening_2111.zip SWH ver. 2.0.0.1 - August 2022 (no support for Windows 11 ver. 22H2)...

malwaretips.com

 

[ForgottenSeer 95367]

I am thinking of using Voodooshield Free (Autopilot). How does it compare against SWH. Is SWH SRP easily bypassable? Should I use both?

Overkill that will create problems for you.

 

[upnorth]

Apart from disabling macros and remote access, what are other ways to harden windows?

SUA ( standard user account ).