SEHOP? DEP? UAC? LUA? SRP? Applocker?

Hi,
I am using Windows 7 x32 Home Premium.

I got few questions on how to secure my laptop.

I enabled SEHOP by downloading 'Microsoft Fix it 50096'
I enabled DEP by following the method that is on the internet.
I enabled UAC at the highest security.

Is there anything else that I should enable?
(without downloading anything, just the windows7 built-in security)


I heard there is LUA, SRP, Applocker and stuff.
Is there more of these kinds?
And can you tell me the method on doing these things?

Thanks in advance.


P.S sorry for my poor English, I hope you understand what I am talking about.

 

Running in an LUA (Limited User Account) is highly advised.
I'm not sure if SRP (Software Restriction Policy) works on 7, wait for someone with more knowledge on the OS to reply.
You can't use AppLocker because you're running Home Premium.

 

SRP is only in professional and higher.

 

Thanks guys.
So I can't do anymore of these things?
Only UAC, LUA, SEHOP, DEP?

 

Not without upgrading your Home Premium to Professional or Ultimate.

 

Alright, Thanks.
I guess I should be satisfied with DEP, UAC, LUA, SEHOP.

 

This may interest you if you really need SRP: https://www.wilderssecurity.com/showthread.php?t=232857
Use at your own risk, I've never tried it myself.

 

Anytime.

 

Perhaps Bebop?

 

If you are using Windows 7, you should not enable SEHOP using Microsoft Fix it 50096. You should enable it manually.

"Note If you are running Windows 7 or Windows Server 2008 R2, go to the " Let me enable it myself" section because the automatic wizard for Windows 7 and for Windows Server 2008 R2 is not available yet."

 

Hi,
I'm not sure.
As I said I used "Microsoft Fix it 50096" to enable SEHOP automatically.
After that I checked the registry and it was all there.
Is there any way that I can check if SEHOP is really enabled?

 

Same thing happened for me.

 

I think it's ok then.

 

As posted in another recent thread (I forget which), the auto fix does in fact work on 7.

 

I can't find it.

 

Try here:

https://www.wilderssecurity.com/showthread.php?t=270357&highlight=sehop

 

Microsoft is just slow sometimes with updating the thousands of knowledgebase pages.

Why don't you download and install Microsot Security Essentials? It integrates perfect with Windows 7. It is also actually just some kind of superset for Windows Defender, Defender will be automatically disabled upon installing.

Windows 7 + Windows Firewall + LUA + UAC + DEP + SEHOP + MSE = bulletproof

(I personally use Admin account with UAC on full, since the the advantages of LUA over Admin with full UAC are really small in my eyes. Certainly too small to make up for the annoyances I encounter when using LUA.)

 

Thank you.

 

I am using MSE.
It's just that I'm confused with the "automatic update" feature in MSE.

1. one update in 24 hours? (default)
2. daily update using MSE update utility? (link given by JRViejo)
3. editing "SignatureUpdateInterval" to check update hourly? (by Troy45)
4. there are ways to make it update more often automatically using scheduled tasks(posted by J L)

I may need your help too.

I tried LUA. I'm not sure if I can adapt to it.
I guess I'll use Admin account with UAC on full just like you.

Thanks.

 

At my other PC where I also use Microsoft Security Essentials I changed the SignatureUpdateInterval registry value. You have to take ownership first because it is protected.

Personally I changed it to 4 hours (avast! 5 Free for example also check every 4 hours, my ESET NOD32 however checks hourly and upon established internet connection, that is in my opinion an improvement MSE should also add: check upon login, or inet connection). I think that is enough because MSE doesn't release as frequent updates as some competitors (like Norton LiveUpdate), MSE releases 1 or 2 big updates per dag. So I thought 4 hours will do.

 

Thanks for your reply.
I really appreciate it.

 

Hi,
Does the thing called ACL have to do with this thread?
Thanks.

 

ASLR

I haven't been able to find much on this for Windows.

How do you enable it for everything? Can it cause any conflicts or slowdowns?

 

It's up to a vendor to enable ASLR for a particular program.

See DEP / ASLR Neglected in Popular Programs for more information.

 

So in conclusion...
In Windows 7 Home Premium,
I can only enable LUA, DEP, SEHOP
No more of these Windows built-in securitiy?
Thanks in adavance.