locked
Comment and a correction RRS feed

  • Question

  • First off - great tool, but I think the guidance could be expanded on - especially around the global profiles. For example, choosing the "Recommended security" global profile on a 2008 R2 system will actually weaken the default settings that are in place for DEP and SEHOP (i.e. disable them unless specifically opted into rather than enable them unless explicitly opted out of). It would be good for the tool to detect the OS it is running on and make recommendations accordingly.

    Also, the user guide states that changing DEP forces you into BitLocker recovery - which you must disable and then decrypt the disk. (you dont need to decrypt the disk - only disable and re-enable)

     

    Friday, September 16, 2011 6:01 AM

All replies

  • Thank you for the comments, we will update EMET docs and logic in future versions to address this.

     

    Thanks again,

    • Proposed as answer by Daniel Wolf Thursday, October 13, 2011 10:15 PM
    Thursday, October 13, 2011 9:18 PM