Managing Windows XP Security Jason Gruber COSC 481 18 April 2006

Topics Virus/spyware Firewall Services Password Patches SP2 Remote access Group Policies File sharing

Virus/Spyware Keep system updated Scan frequently

Firewall Default on after SP2 Can be configured to block ports, protocols, etc Can be configured to exclude certain programs

Services Services are programs that run invisibly in the background. Start at boot not login Should be disabled if not needed

Passwords Important Can be set as required Set min & Max age, complexity, must meet requirements, # remembered, lock out

Patches & Updates Like virus must keep system up to date Patches block security holes

SP2 Inc Several major patches Firewall set on & at boot Auto-updater set on IE: popup & download

Remote Access Great for working with PCs from afar Bad for security Should be disabled when not needed

Groups Admin & General 8 others Should be set to least access New groups can be created as needed

File share Also extreamly useful Should be disabled if not used Disable simple file share Will enable more options, set who can access (name or group), how many, etc