Security settings

Use this page to review each security option, its default, and the file that changes it.

All configuration files listed here are in the 7. Security folder within the Atlas folder on your Desktop.

Understand the risk

Disable a security feature only if:

  • You understand what it protects
  • You accept the added risk and know how to protect the system without it

Disabling protection can expose your files, accounts, and system to attack. Atlas does not accept responsibility for damage caused by disabling security features against these recommendations.

Mitigations

Mitigations are software or hardware techniques that address security vulnerabilities or weaknesses in the CPU. They help prevent software (e.g., vulnerable games) from being exploited to remotely execute code on your system.

Atlas provides scripts and an installation prompt for Windows mitigations. Disabling mitigations can improve performance on some older CPUs. On newer CPUs, including Zen 4, disabling them can reduce performance as well as security.

Atlas disables Fault Tolerant Heap by default. FTH applies non-CPU mitigations to repeatedly crashing processes, at the cost of significantly reduced performance. If you have consistent application crashes, try enabling FTH.

If an anticheat stops working after you disable mitigations, run Set Windows Default Mitigations.cmd in the Mitigations folder. To enable every available mitigation, run Enable All Mitigations.cmd. This is stricter than the Windows default and can reduce performance or compatibility.

Defender

Defender protects against many threats (ransomware, spyware). Some users disable it for privacy and performance on older hardware. Disabling Defender increases infection risk; Atlas doesn’t recommend it.

If you use another trusted antivirus, you do not need to disable Defender manually.

Atlas lets you fully toggle Defender at a component level. Run Toggle Defender.cmd in the Defender folder to enable or disable it. The folder also contains tweaks for Defender and Windows Security.

Core isolation

Core isolation is a Windows security feature that protects core processes from malicious software by running them in a virtualized environment.

Core isolation can have a significant performance cost, especially on older CPUs. Atlas recommends disabling it for most users because the performance cost outweighs the added protection.

For Windows 11 users, Core isolation features are typically enabled by default, as long as your CPU supports Windows 11.

The Core Isolation (VBS) folder contains Current Configuration.cmd to check which Core isolation features are available and configured, plus shortcuts to Core isolation settings. AME Beta also has a prompt to disable Core isolation.

Core isolation features

Available features depend on your hardware and Windows edition. Windows 11 usually exposes more Core isolation features.

  • Memory integrity - Also known as HVCI or ‘Hypervisor-protected Code Integrity’ - Like a security guard between the core components of Windows
  • Credential Guard - Protects lsass.exe by preventing attackers from stealing/dumping credentials from it - lsass.exe contains lots of authentication tokens used by Windows
  • Microsoft Vulnerable Driver Blocklist - A blocklist to block drivers with known security vulnerabilities, as drivers have unrestricted access to a system
  • Firmware protection - Protects against a compromised UEFI/BIOS
  • Memory access protection - Also called Kernel DMA protection. Blocks malicious PCI devices, including devices connected through a Thunderbolt port, from accessing memory
  • Kernel-mode Hardware-enforced Stack Protection - Protects against Return-Oriented Programming (ROP) attacks

UAC

UAC (User Account Control) is a feature in Windows that helps control what changes software can make to your computer. It helps protect against applications malfunctioning or making harmful changes to your computer.

Sophisticated malware can bypass lower UAC levels. Set UAC to its highest level for the strongest prompt protection.

When UAC is disabled, everything runs with fewer elevation prompts. On the current version of Atlas, UAC is enabled by default and the Atlas folder does not ship a UAC disable script. If you change UAC manually, treat it as an advanced Windows configuration change rather than a supported Atlas preset.

Firewall

Firewall is a built-in Windows feature that blocks unwanted connections. Atlas keeps it enabled by default to enhance system security. The current Atlas folder does not ship a Firewall disable script.

Next steps