Harden-Windows-Security

Features of this Hardening script:

-Always up-to-date and works with latest build of Windows (Currently Windows 11 - compatible and fully tested a Lot on stable and Insider Dev builds)
-Doesn't break anything
-Doesn't remove or disable Windows functionlities against Microsoft's recommendation
-Above each command there are comments that explain what it does, why it's there, provide extra important information about it and links to additional resources for better understanding
-When a hardening command is no longer necessary because it's applied by default by Microsoft on new builds of Windows, it will also be removed from this script in order to prevent any problems and because it won't be necessary anymore.
-The script can be run infinite number of times, it's made in a way that it won't make any duplicate changes at all.



Hardening Categories from top to bottom:

 Commands that require Administrator Privileges
 -Windows Security aka Defender
 -Attack surface reduction rules
 -Bitlocker Settings
 -TLS Security
 -Lock Screen
 -UAC (User Account Control)
 -Device Guard
 -Windows Firewall
 -Optional Windows Features
 -Windows Networking
 -Miscellaneous Configurations
Commands that don't require Administrator Privileges
 -Non-Admin Commands that only affect the current user and do not make machine-wide changes.




🎯 if you have any questions, requests, suggestions etc. about this script, please open a new discussion in Github:

https://github.com/HotCakeX/Harden-Windows-Security/discussions