atlantsecurity / windows-hardening-scripts

Windows 10/11 hardening scripts

atlantsecurity

Atlant Security

windows-hardening-scripts's Issues

.scr files not blocked

Shouldn't .scr files be blocked too since those are a common attack vector for malware and hardly ever used legitimately these days?

assoc .scr=txtfile

Windows 11 Script Incompatibility with OSArmor?

Thanks much for that restore point, because it saved my machine from being bricked...

After a variable number of restarts after application of the script in Win 11, on the first restart OSArmor is either present for a time or crashes and OSArmor prompts to restart. If not so, then it takes an additional restart.

After that restart, the computer sometimes will refuse to load anything... Task bar doesn't work, sometimes windows explorer will launch after 5 minutes, sometimes after a time a white screen, start menu fails, win+run works but doesn't launch anything.

Only a roll back works.

I've tried this a total now of 5 times, running the script is the culprit in this scenario and how it mixes with my system.

Note that I only run the bat with OSAmor disabled. Once completed, I enable it again.

Because of the OSArmor crash and failure that only happens in between restarts, I can only guess maybe somehow that is related?

Here's some "hardening" I've used:

DNS Encryption
Custom Group Policy Editor Changes
BitDefender
OOSU10
SysHardener
OSArmor - Extreme Profile
TinyWall
Windows-11-hardening-script.bat

Seguridad

Windows server 2016

Not an issue but questions rather than an issue.

Would the 2019 hardening script work for 2016 windows server?

Whole project as issue

Sure that some people do know how to waste their time. What is certain is that you know something about it. Invariably, attempts to make of a strongly established bad-designed platform a one bit less bad, end in failures. Can't you see you added a new variant of a misleading discourse "A collection of Windows (...) hardening scripts", revealing at best your lack of understanding of global context. Windows, if not none, is the one beyond the scope of being a suitable target to be hardened healthily. Hardening on faulty ground is not meant to do anything but to fail. The sooner you learn it, the better.