Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Hard_Configurator Tools
Testing Windows Hybrid Hardening (new hardening application).
Message
<blockquote data-quote="ForgottenSeer 97327" data-source="post: 1052765"><p>Well, I have used WDAC and SRP since 2019. You have often inspired me (e,g, H_C with AVAST profile). To be honest I have put WDAC + SRP on a few PC's in the following setup (mostly for elderly relatives). I always set an explicit allow on UAC protected folders when I enable ISG to prevent ISG from blocking stuff, I ran into situations where ISG blocked old unsupported versions of a signed program. </p><p></p><p>WDAC</p><p>1. Enable ISG</p><p>2. Exclude scripts and dynamic code (so no DLL's)</p><p>3. Add explicit ALLOW FOLDER for Windows + Programfiles x64 and x32 and ProgramData</p><p>4. Add explicit DENY FOLDER for Shared Folder, Download Folder and Desktop</p><p>5. Block Microsoft advised executables (msHTA.exe etc)</p><p></p><p>SRP (that is basiccally a simplified version of SWH)</p><p></p><p>This WDAC runs fine with all sorts of setups (Microsoft Office and OpenOffice). I only combined this with F-Secure (because the largest ISP in the Netherlands offers free licenses for a rebranded F-Secure). Running fine in this context means = unttended set and forget with no calls that something broke or borked up.</p></blockquote><p></p>
[QUOTE="ForgottenSeer 97327, post: 1052765"] Well, I have used WDAC and SRP since 2019. You have often inspired me (e,g, H_C with AVAST profile). To be honest I have put WDAC + SRP on a few PC's in the following setup (mostly for elderly relatives). I always set an explicit allow on UAC protected folders when I enable ISG to prevent ISG from blocking stuff, I ran into situations where ISG blocked old unsupported versions of a signed program. WDAC 1. Enable ISG 2. Exclude scripts and dynamic code (so no DLL's) 3. Add explicit ALLOW FOLDER for Windows + Programfiles x64 and x32 and ProgramData 4. Add explicit DENY FOLDER for Shared Folder, Download Folder and Desktop 5. Block Microsoft advised executables (msHTA.exe etc) SRP (that is basiccally a simplified version of SWH) This WDAC runs fine with all sorts of setups (Microsoft Office and OpenOffice). I only combined this with F-Secure (because the largest ISP in the Netherlands offers free licenses for a rebranded F-Secure). Running fine in this context means = unttended set and forget with no calls that something broke or borked up. [/QUOTE]
Insert quotes…
Verification
Post reply
Top