Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 925879" data-attributes="member: 32260">It is a part of Hard_Configurator project, but it is also available as a standalone tool (not part of SWH):[URL unfurl=&quot;false&quot;]https://github.com/AndyFul/ConfigureDefender/blob/master/H_C_HardeningTools.zip[/URL]The option *Documents Anti-Exploit* in SWH is different - it prevents the attacks based on VBA (Visual Basic for Applications). Most attacks are performed in this way. But, the non-VBA-based attacks are more and more popular so it is good to apply additional protection via the standalone DocumentsAntiExploit tool. SWH and ConfigureDefender are compatible with it.The ON2 setting and others are explained in the help info of this tool:[ATTACH=full]253096[/ATTACH]It is worth to remember that H_C and SWH settings are system-wide. DocumentsAntiExploit tool can apply settings for the particular user account. After uninstalling H_C, the system-wide settings are set to Windows default values. But the user-dependent settings made via DocumentsAntiExploit tool will not be removed. That is why this tool is not removed, too (available on Desktop). To remove the user-dependent settings for MS Office, the DocumentsAntiExploit tool has to be run on each restricted account and set to OFF.</blockquote>

[QUOTE="Andy Ful, post: 925879, member: 32260"] It is a part of Hard_Configurator project, but it is also available as a standalone tool (not part of SWH): [URL unfurl="false"]https://github.com/AndyFul/ConfigureDefender/blob/master/H_C_HardeningTools.zip[/URL] The option *Documents Anti-Exploit* in SWH is different - it prevents the attacks based on VBA (Visual Basic for Applications). Most attacks are performed in this way. But, the non-VBA-based attacks are more and more popular so it is good to apply additional protection via the standalone DocumentsAntiExploit tool. SWH and ConfigureDefender are compatible with it. The ON2 setting and others are explained in the help info of this tool: [ATTACH type="full" alt="1610966745390.png"]253096[/ATTACH] It is worth to remember that H_C and SWH settings are system-wide. DocumentsAntiExploit tool can apply settings for the particular user account. After uninstalling H_C, the system-wide settings are set to Windows default values. But the user-dependent settings made via DocumentsAntiExploit tool will not be removed. That is why this tool is not removed, too (available on Desktop). To remove the user-dependent settings for MS Office, the DocumentsAntiExploit tool has to be run on each restricted account and set to OFF. [/QUOTE]

Verification