Reply to thread

Message

<blockquote data-quote="plat" data-source="post: 850377" data-attributes="member: 74969">Group policy can harden Windows 10 plenty, without bloat.&nbsp; It just isn&#039;t user friendly.&nbsp; You can configure some <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction" target="_blank">ASR rules</a> via gpedit.msc&nbsp; or use something like Hard_Configurator or NVT SysHardener or OSArmor UIs to do the heavy lifting for you in Home Windows. If you configure these UIs and/or gpedit.msc properly, you would have virtually no need for AppLocker. BitLocker, do you really need it in your environment?&nbsp;&nbsp; You can send your data to a cloud storage or to your own offline storage for no cost.&nbsp; The tradeoff:&nbsp; you must handle your data manually and spend some calories getting out of the chair, maybe untangling some cables and wires.&nbsp; Best thing I did was to recycle some cheap 5400 rpm HDDs into enclosed offline storage.&nbsp; <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite124" alt=":love:" title="Love&nbsp; &nbsp; :love:" loading="lazy" data-shortname=":love:" />Question for anyone:&nbsp; does the Enterprise license have to be renewed?&nbsp; Do you have to pay a yearly fee of some kind?&nbsp; By the way, In Windows 2004 Insider build, &quot;Windows&quot; Defender changes to &quot;Microsoft&quot; Defender in the Group Policy console under Administrative Templates.&nbsp; Just so ya know.</blockquote>

[QUOTE="plat, post: 850377, member: 74969"] Group policy can harden Windows 10 plenty, without bloat. It just isn't user friendly. You can configure some [URL='https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction']ASR rules[/URL] via gpedit.msc or use something like Hard_Configurator or NVT SysHardener or OSArmor UIs to do the heavy lifting for you in Home Windows. If you configure these UIs and/or gpedit.msc properly, you would have virtually no need for AppLocker. BitLocker, do you really need it in your environment? You can send your data to a cloud storage or to your own offline storage for no cost. The tradeoff: you must handle your data manually and spend some calories getting out of the chair, maybe untangling some cables and wires. Best thing I did was to recycle some cheap 5400 rpm HDDs into enclosed offline storage. :love: Question for anyone: does the Enterprise license have to be renewed? Do you have to pay a yearly fee of some kind? By the way, In Windows 2004 Insider build, "Windows" Defender changes to "Microsoft" Defender in the Group Policy console under Administrative Templates. Just so ya know. [/QUOTE]

Verification