I built a WinUI3 Desktop app for system wide security configuration - including some obscure settings. It also supports JSON import/export so you can share you hardening configs with your friends.
@thomasfennel
everythings been great - for the life of me I could not get AcrylicBrush to work within a WinUI3 desktop C++ app but I am probably doing something wrong.
@dwizzzleMSFT
Am I right in understanding that this tool will make it possible to enable kCFG without enabling HVCI and vice-versa, or are the controls linked? I've been wondering about this for some VMs on pre-MBEC devices where the syscall penalty for HVCI is too great for the workload.