Skip to navigation Skip to content

🏠Home
🔑 Login / Register

0

Windows Security Hardening Tool - ToolWeb

🛡️

Windows Security Hardening Tool

Generate customized security hardening scripts for Windows 10/11 systems

🔒 Professional Hardening Configuration 💰 600 Coins

📋 What You'll Get:

PowerShell hardening script (.ps1) ready to execute
Registry configuration file (.reg) for direct import
Comprehensive HTML documentation with explanations
Rollback script to undo changes safely
Based on CIS Benchmarks, Microsoft Security Baselines, and DoD ST

Note: Test in non-production first thoroughly. The generated scripts are reusable.

🔐 Basic Hardening

Essential security measures for immediate protection

Quick Select:

Enable BitLocker Encryption HIGH Enable Microsoft Defender HIGH Disable SMBv1 Protocol HIGH Use Separate Local Admin Account MEDIUM

👤 Account Policies

Password and account lockout policies

Quick Select:

Disable Reversible Encryption HIGH Account Lockout Duration: 15 min MEDIUM Account Lockout Threshold: 10 attempts MEDIUM Enable Admin Account Lockout HIGH

⚙️ Security Options

System-wide security configuration settings

Quick Select:

Block Microsoft Accounts MEDIUM Force Audit Policy Settings MEDIUM Require CTRL+ALT+DEL for Login LOW Don't Display Last Signed-In User MEDIUM Don't Display Username at Sign-In MEDIUM Enable UAC for Built-in Admin HIGH

🌐 Network Security

Network protocols and authentication hardening

Quick Select:

Digitally Sign SMB Client Communications HIGH Digitally Sign SMB Server Communications HIGH Don't Store LM Hash Values HIGH Set LAN Manager Auth Level: NTLMv2 Only HIGH LDAP Client Signing Requirements HIGH Block Anonymous SAM Enumeration HIGH

🔥 Windows Firewall

Firewall configuration for all network profiles

Quick Select:

Enable Domain Profile Firewall HIGH Enable Private Profile Firewall HIGH Enable Public Profile Firewall HIGH Block All Inbound Connections HIGH Log Dropped Packets MEDIUM Log Successful Connections LOW

📊 Advanced Audit Policy

Comprehensive system auditing and logging

Quick Select:

Audit Credential Validation HIGH Audit User Account Management HIGH Audit Process Creation MEDIUM Audit Logon/Logoff Events HIGH Audit Policy Changes HIGH Audit System Integrity HIGH

🪟 Windows Components

Windows features and component hardening

Quick Select:

Disable AutoRun/AutoPlay HIGH Enable PowerShell Logging HIGH Disable Windows Script Host MEDIUM Show File Extensions MEDIUM Disable Remote Assistance MEDIUM Minimize Telemetry Data LOW

📄 Microsoft Office Security

Office applications security hardening

Quick Select:

Block Macros from Internet Files HIGH Disable DDE in Excel/Word HIGH Set VBA Macro Notifications HIGH Disable Office Telemetry LOW Disable ActiveX Controls MEDIUM Disable OLE Package Objects HIGH

⚡ Expert Settings

⚠️ Advanced settings - Change only if you know what you're doing!

Quick Select:

Enable LSA Protection HIGH Enable Credential Guard HIGH Run Defender in Sandbox MEDIUM Enable SEHOP Protection HIGH Force ASLR for All Processes HIGH Enable DEP for All Programs HIGH

✅ Hardening Configuration Ready!

Your customized Windows security hardening files are ready to download

📜

PowerShell Script

Complete hardening script ready to execute with administrative privileges

⚙️

Registry File

Direct registry import file for quick configuration deployment

📄

Documentation

Detailed HTML guide explaining each security setting and its impact

↩️

Rollback Script

Safety script to revert changes if needed