- Apr 5, 2021
- 621
Changed DNS servers from Cloudflare to Quad9.
Changed Hard_Configurator setting to High...
Oops, sorry, I mean Configure Defender Protection level within H_C to High. I forgot CF is built into H_C.????
Oops, sorry, I mean Configure Defender Protection level within H_C to High.
Which H_C's setting profile do you use for now?
Do you mean from the main interface?
EDIT
I chose Recommended Settings if that's what you mean.
View attachment 261613
EDIT 2
So Andy, you have helped me discover predefined profiles. I went to the Manual and found out about them. I just applied: Windows_10_Strict_Recommended_Settings.hdc. I had always thought the Load Profile button was to load profiles saved only by the user - not to also load predefined profiles included with the utility. I had simply hit the Recommended Settings button before.
View attachment 261614
Thanks!
With Microsoft Defender and Hard_Configurator at your settings you could easily go without OSA. You might want to check out the impressive results in these links:
Malware Hub Report - Hard Configurator - march 2019 report
Malware Hub Report - Hard Configurator - april 2019 report
Malware Hub Report - Hard Configurator - may 2019 report
https://malwaretips.com/search/276925/
With these settings you have to remember that:
- Many application auto-updates will be blocked. You have to update these applications manually after switching off the SRP temporarily (<Switch ON/OFF SRP> green button). The details are described in the H_C FAQ.
- In these settings "Install By Smartscreen" works with high privileges, so it should not be used on SUA. When using these settings on SUA the application installations should be done like in point 1. If not then some applications will install files on administrator account instead of the standard user account.
There is no problem when using only one account (default Administrator account).
... I like the restrictions better than the Recommended settings
The Recommended Settings are in fact better for most home users. Anyway, I can understand that you can feel that more restrictive settings can be 'better' for you.
Are you using Application Guard for Edge? (you have a Windows Pro, so it comes with the OS).
There seems to be no limit to the ingenious level of attack methods malware authors create. I guess my overkill setup is to potentially prevent a future attack that might bypass a setup that is currently adequate for home users. I could be out to lunch on this theory, but I guess I like the additional insurance policy, even though it may never be needed.