Applocker windows 8.1 pro Offline#
Firefox and Chrome only) - Media features (I use VLC & IrfanView) - Remote Differential Compression API Support - Print and Document Services (both nested: Internet Printing Client & Windows Fax and Scan) - SMB 1.0/CIFS File Sharing Support - Windows Location Provider - Work Folders Client - XPS Services - XPS Viewer -Disable services (Winkey+R services.msc - NOT msconfig) - disable the following (Black Viper is always the go-to guy for me for these things: » Black Viper?s Windows 8 Service Configurations) - minor variations are listed below (probably because I'm running 8.1 and his list if for 8) - Bluetooth support services (Manual (Trigger Start)) (I don't use on my desktop) - Certificate Propagation (Manual) - Distributed Link Tracking Client (Automatic) - Family Safety (Manual) - Hyper-V Data Exchange Service (Manual (Trigger Start)) - Hyper-V Guest Service Interface (Manual (Trigger Start)) - Not on Black Viper's list – 8.1 addition? - Hyper-V Guest Shutdown Service (Manual (Trigger Start)) - Hyper-V Heartbeat Service (Manual (Trigger Start)) - Hyper-V Remote Desktop Visualization Service (Manual (Trigger Start)) - Hyper-V Time Synchronization Service (Manual (Trigger Start)) - Hyper-V Volume Shadow Copy Requester (Manual (Trigger Start)) - Microsoft iSCSI Initiator Service (Manual) - Netlogin (Manual) - Network Access Protection Agent (Manual) - Offline files (Manual (Trigger Start)) - Note: on his list - not in my services - maybe I already turned that off with Features? - Remote Access Auto Connection Manager (Manual) - Not disabled on his list? I did. NET & Powershell 2.0 – including these: - Internet Explorer 11 (I never use it. I turned OFF all “Windows Features” except. I assume disabling NetBIOS and IPv6 from both network adapters is no longer required for Windows 8.1 – but you know what they say about those who assume – so I did it anyway.- I also uncheck "File Share" item on each of the Eathernet and Wireless adapters - since I don't do that. Not sure yet if I've stiff-armed certain truly-required Windows functions. That may be too much, but Defender updates seem to work. I also disabled all Outbound connections for the Domain Profile, and the Public Profile – leaving the Private Profile (my profile) active for Outbound, so I can send browser requests and such. Delete all green “allow” rules for: - F5.vpn.client, - Juniper Networks Junos Pulse - CheckPoint.VPN - Proximity sharing over TCP - Remote Assistance (like 12 entries) - Basically everything except for “Core Networking”, and maybe Skype – FOR BOTH Inbound and Outbound rule sets.
Only login as Administrator when you need to (like installing apps.) - Review Firewall settings. Does anyone have a link to a solid/reputable Windows 8.1 “101 security tweak article – relative to a home machine with no corporate connectivity? Thanks! =My Straw Man Inventory (What I think I may know): - Confirm UEFI secure boot (precludes much of root kit malware) - Enable the Ctrl-Alt-Del login option - for boot and also challenge when machine awakens (greatly reduce (preclude?) risk of hacked remote login) - Disable “Remote Assistance Connections to this Computer”, from System - Create a non-Administrator user account and use that day to day for web browsing and such. It was also wise to go in and disable certain services you would never use – like Remote Desktop.
Applocker windows 8.1 pro update#
\Microsoft\Windows\WS - Badge Update License / License Validation / ValidationWSRefreshBannedAppsListTask / WSTaskįor example, back in the day with XP I was told it was wise to to go into your network adapters (both Ethernet & Wireless) and disable the NetBIOS and all IPv6 functions. \Microsoft\Windows\WindowsBackup - ConfigNotification \Microsoft\Windows\Windows Error Reporting - QueueReporting \Microsoft\Windows\WDI - ResolutionHost (Disable) \Microsoft\Windows\User Profile Service - HiveUploadTask \Microsoft\Windows\TextServicesFramework - MsCtfMonitor \Microsoft\Windows\SkyDrive - Idle / Sync Maintenance Task / Routine Maintenance Task \Microsoft\Windows\Shell - FamilySafetyRefresh \Microsoft\Windows\SettingSync - BackupTask / NetworkStateChangeTask
\Microsoft\Windows\PerfTrack - BackgroundConfigSurveyor \Microsoft\Windows\Offline Files - Background Synchronization \Microsoft\Windows\NetCfg - BindingWorkItemQueueHandler \Microsoft\Windows\Multimedia - SystemSoundsService \Microsoft\Windows\File Classification Infrastructure - Property Definition Sync \Microsoft\Windows\DiskDiagnostic - Microsoft-Windows-DiskDiagnosticDataCollector \Microsoft\Windows\Defrag - ScheduledDefrag \Microsoft\Windows\Customer Experience Improvement Program - BthSQM / Consolidator / KernelCeipTask / Uploader / UsbCeip \Microsoft\Windows\Application Experience - AitAgent / ProgramDataUpdater / StartupAppTask \Microsoft\Windows\AppID - SmartScreenSpecific
0 kommentar(er)
