Preserved Topic: Securing Windows XP

I'm home from school for a 4 day weekend and this vacation started off like everyone since my freshman year - going from room to room fixing the computers.

I've finally had it with continously re-installing Win XP, deleting viruses, etc. When I'm done re-installing Win XP on the main computer, I'm going to update everything, install Norton AntiVirus 2005, and everything else.

I'm thinking about disabling downloads in Internet Explorer completely. My only fear is if I disable them and someone needs something important they'll be screwed. Is it possible to set something up so I can telnet into my XP machine while I'm at school w/ my Powerbook and install things? I could even use one of the computer labs.

Does anyone have any advice on this?

Your easy, 1 step guide to securing windows XP:

Step 1. Delete XP, get one or another distro of Linux and install that, then lock XP in a safe, encase the safe in lead, then concerete and drop into into the intercontinental abyss.

Well thats not an option. Does anyone have an answer to the question I asked?

Chances are you are looking for something like PC Anywhere, VNC server, or even a Terminal Server, with which, you could take full control of your home PC from wherever you are .. Try any of those. The best I've found to be VNC, since you can cut and paste through computers, or even, drag and drop files between local->remote.

For a start don't use internet explorer, that will solve half your problems right off.

secondly try making one of these, it's an unattended XP installation CD, you pop it in your drive and leave it be, you come back and you've got XP installed with all your favourite settings and programs already installed.

Hope this helps!

Blaise

http://csrc.nist.gov/itsec/guidance_WinXP.html

Thanks for the advice TiMun. I'll have to look into those.

I have a question about NAV 2005 though. It recommends I disable Windows Firewall and enable Internet Worm Protection instead. This computer is on a broadband connection so I'd rather not disable my firewall. Do you guys have any suggestions?

The Microsoft Baseline Security Analyzer can scan your PC or another one on the network for missing patches, commonly exploited configurations, and other things that may be a security problem. I seem to remember it also giving an explination of the problem and how to fix it for many of the problems it finds.

For a link to get you started:
http://www.microsoft.com/technet/security/tools/mbsahome.mspx

__________________________
"Show me a sane person and I will cure him for you."-Carl Jung
Eagles may fly high, but beavers don't get sucked into jet engines.
tj333- the semi-Christ