Lapsec pretends to become a solution able to harden a Windows operating system in a very easy way, automating tasks that in other way could become complex and difficult for an administrator or an user worried about computer security.
Every time a Windows system is installed in a laptop the same changes should be done (specially useful for laptops) to try to keep the system a bit more secure. The idea is from Sergio de los Santos, the scripting is from Marcin "Icewall" Noga and the design is form Alberto García.
It is not a complex program but we believe it is very useful. We are grateful to receive bugs and suggestions at firstname.lastname@example.org. The main idea is to check if the system is hardened or needs to be hardened. You have to tick what it has to be hardened and at the same time what is hardened will be ticked.
To harden a laptop, probably the most efficient way is using TrueCrypt on a system partition. This program tries to help where using TrueCrypt is not possible.Quickstart
The program tries to be as simple as possible. There is only one screen and two options to choose. "Am I secure?" allows checking which of the options that the program checks are active in the running system. It will tick the running ones. "Secure me" applies the checked changes to the system.
The user can freely choose which of the listed options wants to apply on the system and which ones does not, just checking and unchecking the desired ones.
Once having chosen the wanted ones, the user can press "Secure me!" button to apply the changes. Be aware that the unchecked ones will be rolled back. As an example, if the option "Remove LM cipher for passwords" has not been checked and we press "Secure me!", this option will be rolled back so instead of been disabled it will be enabled.
To know about the options that the system has enabled, press the "am I secure?" button that will display the options enabled in the system.
It is important to run the program with system adminitrator privileges or an account belonging to administrators group.
- FREE DOWNLOAD LAPSECURER ( zip file )
Pressing this option, the modifications that are already applied on the system will be ticked.
This is a query only option.
If pressing this button, and the "Deactivate hibernation" feature is checked, it will mean that hibernate option is already deactivated in the system.
If this option is pressed, and "Cipher My documents" is ticked, It will mean that "my documents" is already ciphered.How to harden the operative system (Secure me!)
Pressing this option, the ticked options will be applied and the ones that are not will be rolled back.
- If you tick "Remove LM cipher for passwords" and you uncheck "Check password complexity", when clicking "Secure me!" the system will disable LM cypher on password storing and will stop checking password complexity.
- If "Install / Uninstall context menu wiper" is checked and "Cypher My Documents" is unchecked, when clicking "Secure me!" the system will uninstall secdel, safe removing form context menu and also will decrypt "My documents" folder.
Not only "My Documents" but LapSec also allows ciphering with EFS any folder chosen by the user in an easy way. It is important to be aware that because of EFS limitations system files or windows folder can not be ciphered.WE RECOMMEND CIPHERING ONLY USER DATA FOLDERS.
If, by any reason, after ciphering a folder the user is removed from the system ,DATA WILL BE UNACCESIBLE even creating an user with the same username. It is mandatory a backup of the data that is going to be cyphered.
To avoid this situation, it is mandatory as well exporting the certificate and storing in a safe place.
Certificate can only be saved once a folder has been ciphered.Secure delete
Secure delete system may be installed or uninstalled through this option. To use it, you will only need to right click over the file you want to remove and select "secdel" option. The file will be removed in a permanent way.