Serious Discussion WHHLight - simplified application control for Windows Home and Pro.

[Andy Ful]

Am I overthinking this??

Yes, you are.
When you run WHHLight for the first time it applies the default configuration. Simply close WHHLight and restart Windows (as suggested in the closing alert).
Do not tweak WHHLight until you understand how the current settings work. The WHHLight Manual (PDF document) provides useful information - you can find it in the WHH _Tools folder.

Edit.
Did you encounter any blocks?

 

[simmerskool]

Yes, you are.
When you run WHHLight for the first time it applies the default configuration. Simply close WHHLight and restart Windows (as suggested in the closing alert).
Do not tweak WHHLight until you understand how the current settings work. The WHHLight Manual (PDF document) provides useful information - you can find it in the WHH _Tools folder.

Edit.
Did you encounter any blocks?

Thanks, I read thru the help(s) a 2d time and that helped, and I ended up doing exactly what you advised before I read your post, for now I left the WDAC off, (I'll probably dream about this tonight and understand it tomorrow -- even with eyeglasses my eyesight is problematic and the popup help info is a struggle for me to read & no copy and paste.
PS no blocks yet. performance speed is very fast. -- correction: the CD had 2 blocks and FWH had about dozen, but all the same thing, looked like some sort of MS telemetry. WHHL specific blocks, not aware of any yet, but not looking for malware.

 

[Andy Ful]

even with eyeglasses my eyesight is problematic and the popup help info is a struggle for me to read & no copy and paste.

Did you try to use Windows Magnifier?

To quickly turn on Magnifier, press the Windows logo key + Plus sign (+) . To turn off Magnifier, press the Windows logo key + Esc.

Use Magnifier to make things on the screen easier to see - Microsoft Support

Learn how to make items on the screen appear larger by using Magnifier in Windows.

support.microsoft.com

Another way to improve display is to use a high resolution with Scale = 125% or 150%. However, such a solution must be tested to confirm that all your applications are properly displayed (older applications may not).

 

[simmerskool]

Did you try to use Windows Magnifier?

Another way to improve display is to use a high resolution with Scale = 125% or 150%. However, such a solution must be tested to confirm that all your applications are properly displayed (older applications may not).

good info thanks re magnifier. Meanwhile how about a plain text file with help info, (there's a readme but did not say much) that way I could edit it with notes to myself, eg, see MT URL... but I need to read more about WDAC and have an app to use it with -- now I do. Today I booted linux for peace of mind

 

[Andy Ful]

good info thanks re magnifier. Meanwhile how about a plain text file with help info, (there's a readme but did not say much) ...

Did you read the "WHHLight Manual"?

 

[simmerskool]

Did you read the "WHHLight Manual"?

huh was it included with download WindowsHybridHardeningLight_2001_beta3.exe -- I'm using linux VM but I don't recall seeing it in windows folder. maybe it's separate DL on git-hub. I do see file readme.md -- is that the manual? I sorta skimmed it the other day thinking it will DL with WHHL, or maybe it is in the WHHL windows folder? I just copied and pasted the text from the git-hub web page. But Andy using the app should just be intuitive just kidding totally appreciate your apps and all your effort here.

EDIT ...but clearly the use of WDAC is NOT as easy as ABCD, see eg (it starts to give me a headache -- perhaps why it is switched OFF in WHHL as default...)

DEPLOYING WINDOWS 10 APPLICATION CONTROL POLICY | Microsoft Community Hub

All things about WDAC – Windows Defender Application Control: Planning, Deployment, Testing, Monitoring, best practice, tips and Troubleshooting.

techcommunity.microsoft.com

 

[Andy Ful]

huh was it included with download WindowsHybridHardeningLight_2001_beta3.exe -- I'm using linux VM but I don't recall seeing it in windows folder. maybe it's separate DL on git-hub. I do see file readme.md -- is that the manual? I sorta skimmed it the other day thinking it will DL with WHHL, or maybe it is in the WHHL windows folder? I just copied and pasted the text from the git-hub web page. But Andy using the app should just be intuitive just kidding totally appreciate your apps and all your effort here.

EDIT ...but clearly the use of WDAC is NOT as easy as ABCD, see eg (it starts to give me a headache -- perhaps why it is switched OFF in WHHL as default...)

DEPLOYING WINDOWS 10 APPLICATION CONTROL POLICY | Microsoft Community Hub

All things about WDAC – Windows Defender Application Control: Planning, Deployment, Testing, Monitoring, best practice, tips and Troubleshooting.

techcommunity.microsoft.com

After the installation, you can see the WHH_Tools shortcut on the Desktop. When you click on the shortcut, the folder (C:\ ProgramData\WindowsHybridHardening_Tools) containing all tools and manuals opens. You should easily see it if you can see and execute the "WindowsHybridHardeningLight_2001" executable.

 

[Andy Ful]

EDIT ...but clearly the use of WDAC is NOT as easy as ABCD, see eg (it starts to give me a headache -- perhaps why it is switched OFF in WHHL as default...)

Normally it is. But with WHHLight it is much easier. Anyway, you should not apply WDAC immediately. Wait until you are certain how your applications work with default settings.
Next, you can apply WDAC but do not remove the default folders from the WDAC Whitelist.

I do not recommend more tweaks except when one understands well all the information included in the manual. Of course, you can experiment in the VM with a custom WDAC Whitelist, this cannot kill the system. Simply, some applications will be (partially) blocked and require whitelisting. Anytime, you can simply switch off WDAC to get the current settings.

 

[simmerskool]

After the installation, you can see the WHH_Tools shortcut on the Desktop. When you click on the shortcut, the folder (C:\ ProgramData\WindowsHybridHardening_Tools) containing all tools and manuals opens. You should easily see it if you can see and execute the "WindowsHybridHardeningLight_2001" executable.

well yes the shortcut was on the desktop, yes it did put the files in programdata, but do not recall a manual opening? so then the manual is a file in the programdata folder? (I'm still running linux today, but will boot win10_VM with WHHL installation later today. Thanks.
PS WHHL sure seemed to update the registry with only SWH [ ON ] (default) (I understood about run_by_smartscreen -- I've been using that for awhile).

 

[Andy Ful]

PS WHHL sure seemed to update the registry with only SWH [ ON ] (default)

That is why the SWH restrictions can work.