Security Hardening Settings

Harden Windows security settings including RDP, UAC, credential protection, and network protocol hardening. Every toggle generates a transparent PowerShell script you can inspect before running.

Remote Access

Enable Remote Desktop Enables RDP and opens the firewall rule. Registry: fDenyTSConnections

Require NLA for RDP Requires Network Level Authentication before RDP connection. Registry: UserAuthentication

Disable Remote Assistance Prevents remote assistance connections. Registry: fAllowToGetHelp

Authentication & UAC

Require Ctrl+Alt+Del at login Adds a secure attention sequence before the login screen. Registry: DisableCAD

Device Security

Disable AutoRun / AutoPlay Prevents automatic execution of media and devices. Registry: NoDriveTypeAutoRun

Require SMB signing Requires digital signing of SMB packets. Registry: RequireSecuritySignature

Network Protocol Hardening

Disable LLMNR Disables Link-Local Multicast Name Resolution (prevents poisoning attacks). Registry: EnableMulticast

Disable WPAD Disables Web Proxy Auto-Discovery (prevents MITM attacks). Registry: WpadOverride

## Toggle settings above to generate your script.

## Toggle settings above to generate your revert script.

Want all categories + profiles + one-click rollback?

Download the BaseConf desktop app →