Harden Windows Security v.0.7.2
What's New
This update is full of new features 🎉
Ability to Remove built-in pre-installed apps
Introduced the ability to remove built-in apps using the Harden Windows Security module. This functionality is available on a dedicated page. The list of removable apps is stored in a JSON file, providing flexibility and extensibility.
When apps are removed using the Harden Windows Security module, they are removed for all users, and they won't come back when you create a new user. They are re-installable from the Microsoft Store if necessary.
The JSON file currently includes 37 apps. More apps can easily be added to it in the future without requiring to modify the code.
Ability to Remove Individual Optional Windows Features and Capabilities
Added a new page for managing Optional Windows Features. While the Harden Windows Security module already includes an Optional Features category in the hardening measures section, this new page allows for granular control, enabling you to fine-tune which features to enable or disable. It also includes additional optional features that can be removed.
Online File Reputation Check via Smart App Control/SmartScreen through Microsoft Defender
Using Microsoft Defender, queries a file's reputation based on either the Smart App Control or SmartScreen, depending on whichever is in control. It doesn't need Admin privileges. It's in a new dedicated tab available in the GUI. Simply browse for a file and detect its reputation and some other advanced details. You can use this feature while other tasks in the Harden Windows Security module are running.
Added Reduced Telemetry Policies
Added reduced telemetry policies to the Miscellaneous Category in the Harden Windows Security module. They are a sub-category and include the following policies:
-
Disable Online Tips. CSP
-
Disable Find My Device feature. CSP
-
Disable Automatic Update of Speech Data. CSP
-
Turn off the advertising ID. CSP
-
Turn off cloud optimized content. CSP
-
Do not show Windows tips. CSP
-
Do not show feedback notifications. CSP
-
Turn off Automatic Download and Update of Map Data. CSP
-
Disable Message Service Cloud Sync for cellular text messages. CSP
-
Disable support for web-to-app linking with app URI handlers. CSP
-
Disable "Continue experiences on this device" feature. CSP
-
Disable Font Providers. CSP
-
Don't search the web or display web results in Search. CSP
-
Do not allow web search. More Info
AppControl Manager Installer Integration
You can now install the AppControl Manager right from the Harden Windows Security module. This is a very convenient way to install it as it only requires a click/tap of a button.
Other Changes
-
Compliance Checking Enhancement: Added support for VBScript compliance checks.
-
Code Improvements: Implemented several code enhancements and optimizations.
-
UI Enhancements: Updated the button styles on the ASR Rules and Unprotect pages. The new design replaces the previous animated buttons with play icons, offering a cleaner and more modern look.
-
Added description texts to the top of the pages.
-
Changed
Only Elevated Signed
sub-category name toOnly Elevate Signed
, it was a typo. -
Updated the readme.
-
Updated the demo gif to reflect the changes in the GUI.
Auto generated release notes 👇
- AppControl-Manager-DownloadLink-Version-Update-Version-1.8.2.0 by @github-actions in #500
- Implemented Apps and Windows Features Removal by @HotCakeX in #506
- Implemented online file reputation verification in the Harden Windows Security moulde by @HotCakeX in #507
- Added AppControl Manager native installer to the Harden Windows Security Module by @HotCakeX in #508
- Improved the bootstrapper script by @HotCakeX in #509
- Added reduced telemetry policies by @HotCakeX in #510
Full Changelog: AppControlManager.v.1.8.2.0...Hardening-Module-v.0.7.2