SysHardener changes Windows and application settings to restrict functionality that can expose a system to attacks. It can remove selected file associations, disable scripting or Office features, and apply Windows Firewall rules for outbound connections. Users can apply selected settings or restore their defaults through the interface or command-line options.