search

HotCakeX / Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md
https://hotcakex.github.io
MIT License
1.84k stars 143 forks source link

[Bug]: Some Windows Defender options not working on Windows 11 VM #216

Closed MineRock closed 8 months ago

MineRock commented 8 months ago

Tools category

Harden Windows Security Script

Does your system meet the requirements?

Is your Windows installation genuine?

Please explain the bug

I am using VMWare Workstation Pro 17, running a clean installed Windows 11 VM (TPM enabled, Secure Boot on, allocated 8GB RAM and 4 cores, running on the latest PowerShell 7) and while applying the Windows Defender hardening measures, the following MpPreferences fail to apply: OobeEnableRtpAndSigUpdate, IntelTDTEnabled, PerformanceModeStatus, EnableConvertWarnToBlock, BruteForceProtectionAggressiveness, BruteForceProtectionConfiguredState, BruteForceProtectionMaxBlockTime, RemoteEncryptionProtectionAggressiveness, RemoteEncryptionProtectionConfiguredState, RemoteEncryptionProtectionMaxBlockTime

These options are not listed when I run Get-MpPreferences either. I did not face any issue running these on my laptop running Windows 11. What could be the problem here?

HotCakeX commented 8 months ago

Hi, You need to make sure first you're using the latest Windows 11 build, then restart your computer after update once or twice, then they will become available.

I've seen that behavior many times myself, it's alright just restarting twice after fully updating the system makes them available to you. Those are relatively new features that don't exist in the OS ISO file by default and only come after installing the latest updates. The restarts activate them. Make sure Internet connectivity exists too.

HotCakeX commented 6 months ago

@MineRock Hello, I just released an update for the Harden Windows Security module and script that detects the available parameters of the Microsoft Defender and if any of them is unavailable, displays a message about restarting the system to make them available, so there will no longer be an error for it.

https://github.com/HotCakeX/Harden-Windows-Security/releases/tag/Hardening-Module-v.0.4.1