You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+40-24Lines changed: 40 additions & 24 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,15 +1,27 @@
1
-
**Optimizing and Hardening Windows 10 Deployments**
1
+
# Optimizing and Hardening Windows 10 Deployments
2
2
3
-
Download all the required files from the [GitHub Repository](https://github.com/smiltech/W10-Optimize-and-Harden)
3
+
**Download all the required files from the [GitHub Repository](https://github.com/smiltech/W10-Optimize-and-Harden)**
4
4
5
5
6
6
Windows 10 is an invasive and insecure operating system out of the box.
7
7
Organizations like [PrivacyTools.io](https://PrivacyTools.io), [Microsoft](https://microsoft.com) and the
8
8
[Department of Defense](https://public.cyber.mil) have recomended configuration changes to lockdown, harden, and secure the operating system. These changes cover a wide range of mitigations including blocking telemetery, macros, removing bloatware, and preventing many physical attacks on a system.
9
9
10
+
## Requirements
11
+
-[x][Standards](https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-highly-secure) for a highly secure Windows 10 device
-[x] System is [fully up to date](https://support.microsoft.com/en-gb/help/4027667/windows-10-update)
14
+
-[x] (default activated) internal Windows Defender protection instead of external "Security" solutions
15
+
-[x] Latest Driver and Program updates
16
+
-[x] No "Tuning" tools
17
+
-[x] Only necessary tools which you realy need
18
+
-[x][Hardware Requirements](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection#requirements-met-by-system-guard-enabled-machines) for [System Guard](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-how-hardware-based-root-of-trust-helps-protect-windows) / [Hardware-based Isolation](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/overview-hardware-based-isolation)
19
+
-[x][Hardware Requirements](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/requirements-and-deployment-planning-guidelines-for-virtualization-based-protection-of-code-integrity#baseline-protections) for [Memory integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/memory-integrity)
20
+
-[x][Hardware Requirements](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/reqs-wd-app-guard) for Windows [Defender Application Guard](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview) (WDAG)
21
+
-[x][Hardware Requirements](https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-requirements) for Windows [Defender Credential Guard](https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-how-it-works)
10
22
11
23
12
-
A list of script and tools this collection utilizes:
24
+
## A list of scripts and tools this collection utilizes:
[Specture and Meltdown Mitigations](https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities)
[Microsoft - Specture and Meltdown Mitigations](https://support.microsoft.com/en-us/help/4072698/windows-server-speculative-execution-side-channel-vulnerabilities)
37
49
38
-
[Managing Windows 10 Telemetry and Callbacks](https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services)
50
+
[Microsoft - Windows 10 Privacy](https://docs.microsoft.com/en-us/windows/privacy/)
[Microsoft - Managing Windows 10 Telemetry and Callbacks](https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services)
41
53
54
+
[Microsoft - Windows 10 VDI Recomendations](https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909)
42
55
56
+
57
+
## How to run the script
58
+
59
+
**The script may be lauched from the extracted GitHub download like this:**
The script we will be using must be launched from the directory containing all the other files from the [GitHub Repository](https://github.com/smiltech/W10-Optimize-and-Harden)
44
64
45
-
In order to enable the Windows 10 VDI Optimizations you must uncomment the line below:
65
+
**In order to enable the Windows 10 VDI Optimizations you must uncomment the line below:**
46
66
```
47
67
.\Scripts\"Debloating, Optimization, and Privacy"\"Windows_10_VDI"\1909_WindowsUpdateEnabled\Win10_1909_VDI_Optimize.ps1
48
68
49
69
```
50
-
In order to enable the SSL Hardening you must uncomment the line below:
70
+
71
+
**In order to enable the SSL Hardening you must uncomment the line below:**
51
72
```
52
-
.\Scripts\"Security, Hardening, and Mitigation"s\"SSL Hardening Registries.ps1"
73
+
.\Scripts\"Security, Hardening, and Mitigation"\"SSL Hardening Registries.ps1"
53
74
54
75
```
55
76
56
-
The script we will be using is called **"installallstandalone.ps1"** and its contents are:
77
+
**The script we will be using is called **"installallstandalone.ps1"** and its contents are:**
57
78
58
79
```
59
80
######SCRIPT FOR FULL INSTALL AND CONFIGURE ON STANDALONE MACHINE#####
0 commit comments