Hardentools

Hardentools is a collection of simple tools designed to disable a number of "features" exposed by operating systems (Microsoft Windows) and primary consumer applications. These features, commonly considered for enterprise customers, are generally useless to ordinary users and rather act as a danger because they are very often exploited by attackers who thus execute malicious code on the computer. The purpose of this tool is simply to reduce the attack surface, so it disables Windows Script Host, AutoRun, AutoPlay and the execution of cmd.exe, powershell.exe and powershell_ise.exe from Windows Explorer. It will also block macros, ActiveX and OLE object execution in Microsoft Office, as well as disabling JavaScript in PDF documents and execution of objects embedded in PDF files. Restoring these features is as simple as disabling them.