Serious Discussion WHHLight - simplified application control for Windows Home and Pro.

wileecoyote128 said:
I am sorry, I am not very good in setting up things on my computer. If I download the WHHLight, what is the best settings to use to set up a home computer?
Click to expand...
Recommended settings for WHHLight. Just turn these ON and keep defaults.
  • SRP = ON
  • SMARTSCREEN BLOCK = OFF
  • WDAC = ON
but if you are not accustomed to WHHLight you can try first the setup with <WDAC> = OFF combined with Microsoft Defender's HIGH Protection Level and FirewallHardening (H_C Recommended settings). This is a strong setup.
 
  • Like
Reactions: Back3, Andy Ful, pytroman86 and 3 others
Andy has anything changed regarding WDAC (or maybe related to SAC) in recent windows updates?

I am unable to turn WDAC on, it is not even showing in the dropdown menu:

1781063280820.png
 
Last edited:
  • Like
  • Sad
  • Wow
Reactions: simmerskool, Andy Ful, pytroman86 and 2 others
Andy Ful said:
There is no settings backup in WHHLight.
It is in H_C because H_C is much more complex/configurable.
Click to expand...
For now, WHHLight doesn't prevent me from using Windows. I've kept the settings for ConfigureDefender and FirewallHardening.

In any case, I appreciate being able to make Windows a little more secure for free. Thanks!
 
Last edited:
  • Like
Reactions: Parkinsond
I think I'll stick with WHHLight if WHHFull doesn't end up being released...

Because even though H_C didn't give me any trouble for a long time, in the end—I don't know why—I ran into a problem with the shortcuts that I tried to fix without success...


If WHHFull ever sees the light of day, what are the differences between H_C, WHHLight, and WHHFull—or between the latter two “WHH” versions?





Thanks
 
Last edited:
  • +Reputation
Reactions: Parkinsond
Divine_Barakah said:
Does Hard Confgurator cover all Andy's tools? I have only used Configure Defender.
Click to expand...

H_C = Application Control based on SRP and Policies + ConfigureDefender + FirewallHardening + DocumentsAntiExploit + Forced SmartScreen

WHHLight = Application Control based on SRP, WDAC, and Policies + ConfigureDefender + FirewallHardening + DocumentsAntiExploit + Run By SmartScreen

WHHLight is more standardized (compared to H_C). It includes configurations with a good balance between convenience and security. Very restrictive setups are skipped.
H_C is more complex and also allows very restrictive setups, which can be painful for many users.
 
  • Like
  • Thanks
  • +Reputation
Reactions: Wrecker4923, ProblematicPions, pytroman86 and 3 others
Andy Ful said:
H_C = Application Control based on SRP and Policies + ConfigureDefender + FirewallHardening + DocumentsAntiExploit + Forced SmartScreen

WHHLight = Application Control based on SRP, WDAC, and Policies + ConfigureDefender + FirewallHardening + DocumentsAntiExploit + Run By SmartScreen

WHHLight is more standardized (compared to H_C). It includes configurations with a good balance between convenience and security. Very restrictive setups are skipped.
H_C is more complex and also allows very restrictive setups, which can be painful for many users.
Click to expand...
Thank you for the clarification Andy
 
  • Like
Reactions: Wrecker4923, pytroman86, Andy Ful and 1 other person
Weird... after updating Windows yesterday I now can't launch apps via the SendTo context menu. Don't know if WU changed something in WHHL because looking at SWH Events I get this (never-seen-here-before) error:

Event[0]:
Event Id = 865
Local Time: 2026/07/16 08:50:10
EventRecordID = 228199
Execution ProcessID = '13116' ThreadID='4780'
Computer = [removed]
UserID='S-1-5-21-2201615654-815352239-1026279676-1001'
Attempted Path = C:\Users\[username]\AppData\Roaming\Microsoft\Windows\SendTo\ReNamer.lnk
Description: Default Level SRP block
Click to expand...

Looking at my Whitelist these entries should make it work...

Whitelist.png


So my question is if anyone else is experiencing this? And of course, any tips on how to fix it? :)
 
Last edited:
  • Like
Reactions: Parkinsond
Shortcuts can be whitelisted only by using the "Add Path*Wildcards" option.

1784205186657.png


Simply, copy/accept the blocked path into the input box (do not use quotation marks).

I included information about whitelistnig shortcuts in the SWH help:

1784205339879.png
 
Last edited:
  • +Reputation
Reactions: simmerskool, ProblematicPions and Parkinsond

You may also like...