Windows 10: Clear Pagefile on Shutdown

I've been looking into clearing the pagefile, and I found the following steps at a somewhat dated webpage:

• In the registry editor, navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
• Set ClearPageFileAtShutdown to the REG_DWORD value of 1.
• Restart Windows.

I'm just wondering whether those steps are still valid, and, if so, does clearing the pagefile work as advertised?

:)

 

Windows 10 takes too long to shutdown/restart/hibernate

check this first

goto

• Click Start, type secpol.msc, and then press ENTER.
• Expand Local Policies.
• Click Security Options.
• Look in the 'Security Setting column to the right side of the Shutdown: Clear virtual memory pagefile entry.

Shutdown: Clear virtual memory pagefile

Disable it.

 

Best pagefile size for Windows 10 x64 OS

Sorry I bump this question but wanted to ask if pagefile set to System Managed and Automatic memory dump then can this cause disk space to change (to become smaller, i.e pagefile increasing) when CPU, memory and disk usage is high? Today I opened around
30 tabs in Mozilla and then I noticed 2 gb from my C was gone. I cleared Mozilla cache and history but the 2 gb weren't restored. Might this be because system automatically making pagefile bigger because of high resources usage?

 

You are running a VM - you could test it *Wink (shut down your VM, mount the vhd and have a look).

Spoiler

yes it does still work the same

Really though I have to ask why? Sure there can be stuff in your pagefile (passwords perhaps) but if your disk isn't encrypted then it hardly matters as it would normally be much much easier to read things elsewhere. It isn't easy to read pagefile as there isn't any logic in where things are or in what format.

Is your reason security? If so FDE is the only solution.

If your reason is performance it will only make it worse - even MS say so

source

 

Clearing the pagefile is a security measure. In spite of claims to the contrary it has no other benefits. It writes zeroes to every byte of the pagefile. It does not delete the pagefile as sometimes claimed. It will increase shutdown time, particularly on systems with slow hard drives (laptops). It cannot be used with hibernation. While it isn't really a bad idea it makes little sense except as part of a comprehensive security policy. Most systems have security risks that are more serious than an uncleared pagefile. In most cases a hacker could obtain what he wanted by other means with less effort.

 

Regarding testing it, all I really know how to do is make sure that nothing bad happens, which I did last night.

My reason is basically paranoia about privacy stemming from a bad experience.

As far as FDE is concerned, I haven't fully explored data-leak issues yet, but, so far it looks as if 7zip and Eraser would meet my needs adequately. (I'll probably be posting another thread or looking elsewhere, if not.)

I'm aware of the performance issue, but it doesn't seem to be a problem right now.

Anyway, thanks for the information.

 

It really depends.

FDE (and clearing pagefile which is pointless I think) stop people getting information from your PC if they steal it.

If someone has access to your PC and is signed on and you are trying to stop them accessing certain files then you could use 7zip I guess (and FDE would not help). It is a whole other question.

I use bitlocker (in case I lose my laptop again) but I also have accounts for my wife and son. If they get past the bitlocker (which they can with their fingerprints obviously) then it is as open as any other PC for them. So I have further encrypted containers (I use 7-zip). VMs I use are also encrypted. Just because.

Anyway, sorry about your issue and do try to explain who your are trying to stop accessing what, perhaps we can help.

Do remember though that if you give away your details online it makes no difference what security you had on your local PC when you did it.

 

My concerns are with general theft and privacy issues.

 

Theft? Upgrade to Pro and enable bitlocker. There is no other sensible supported solution at all any more.

Privacy? It is entirely separate. It is valid concern but there are too many tin foil hat conspiracy nuts who keep jumping on anything with the word "privacy" and complaining about MS - it is just too boring. Please open another thread for that (so I can ignore them).

You could look here for a start though - Tor Project: Anonymity Online Do read the FAQ though, they are quite interesting.