search

AndyFul / Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS
Other
499 stars 43 forks source link

Logoff not always necessary #4

Closed ghost closed 3 years ago

ghost commented 4 years ago

Logoff is not alway necessary to activate SRP. I would suggest to disable and enable SRP on applying changes - that usually does the job...

beerisgood commented 4 years ago

You can choice between logout and explorer refresh..

ghost commented 4 years ago

@beerisgood I know - but Explorer Refresh is sometimes not working - "restarting" SRP works. Logoff is not necessary.

AndyFul commented 4 years ago

Hi, Thanks for the suggestion. Do you mean using "(Re)Install SRP" and recover "Default Security Level"? I will see if this can be a safe alternative to Logging OFF. For now, you can have to also recover a custom list of protected extensions (but this can be done automatically if reinstalling SRP will work).

ghost commented 4 years ago

I'm not sure how Restric'tor does it - it might be just setting unrestriced and setting the desired level again - but it does not need a logoff or explorer restart.

AndyFul commented 4 years ago

I am not sure how Restrictor can do it, but I found out how this can be easily done. Simply, adding/removing an extension on the Designated File Types list automatically applies changes in SRP Disallowed or Unrestricted rules. This is completely undocumented, so I have to test it thoroughly.