Hard_Configurator — GUI to Manage Software Restriction Policies (SRP) and harden Windows Home OS (Vista and later versions). This program is a configurator that configures Windows built-in security to harden the system. When you close Hard_Configurator it closes all its processes. The protection comes from the reconfigured Windows settings. Hard_Configurator can be seen as a Medium Integrity Level ‘Anti-exe + Whitelisting’ (via default deny SRP) + Application Reputation Service (forced SmartScreen) + Windows hardening settings (restricting vulnerable features).
Hard_Configurator makes changes in Windows Registry to accomplish the tasks enumerated below:
Enabling Software Restriction Policies (as default-deny) in Windows Home.
Changing SRP Security Levels, Enforcement options, and Designated File Types.
Whitelisting files in SRP by path (also with wildcards) and by hash.
Blocking vulnerable system executables via SRP (Bouncer black list).
Protecting (deny execution) Writable subfolders in «C:\Windows» folder (via SRP).
Restricting shortcut execution to some folders only (via SRP).
Enabling Windows Defender PUA protection (via ConfigureDefender).
Protecting MS Office and Adobe Acrobat Reader XI/DC against exploits via malicious documents.
Most of the above tasks can be made by hand using Windows regedit. Anyway, with Hard_Configurator, it can be done more quickly and safely. Also, the user can quickly apply custom settings saved in profiles.
Features for SmartScreen
Forcing SmartScreen check can be very useful, because normally the SmartScreen Filter in Windows 8+ allows many vectors of infection listed below:
A)You have got the executable file (BAT, CMD, COM, CPL, DLL, EXE, JSE, MSI, OCX, PIF, SCR and VBE) using:
the downloader or torrent application (EagleGet, utorrent etc.);
container format file (zip, 7z, arj, rar, etc.), with the exception of built-in Windows decompressing option for ZIP files.
CD/DVD/Blue-ray disc image (iso, bin, etc.);
non-NTFS USB storage device (FAT32 pendrive, FAT32 USB disk);
so the file does not have the proper Alternate Data Stream attached (Mark Of The Web).
B)You have run the executable file with runas.exe (Microsoft), AdvancedRun (Nirsoft), RunAsSystem.exe (AprelTech.com), etc.
Forcing SmartScreen check, can protect in a smart way file execution with Administrative Rights in the User Space (see point A), and is a complementary to SRP that covers file execution as standard user. If «Run as administrator» option is hidden from Explorer context menu, while SRP and «Run As SmartScreen» are both activated, then the user can only execute files that are whitelisted or checked by SmartScreen Application on the run.
If SRP is deactivated, then Hard_Configurator options can be changed to force SmartScreen check without invoking Administrative Rights. This change adds «Run By Smartscreen» option to Explorer context menu.
Hard_Configurator is based on Windows built-in security, so there is no need to turn off the program restrictions to install Windows Updates, Universal Applications from Windows Store, and perform system Scheduled Tasks.
Homepage | Changelog OS: Windows Vista / 7 / 8 / 8.1 / 10 (x86-x64) Language: ENG Medicine: Freeware Size: 33,39 MB.