1. MS System Setup Securing A System

2. Use Automatic Updates For a workstation or server, schedule the updates to occur regularly. –Control panel click on security center. Should a portable computer be any different.

3. Limited-Access Accounts Create a limited access account for each user with strong passwords. Administrative access should be reserved for administrative tasks only Control panels -> User Accounts

4. Install/(Uninstall) Applications Registry cleaner: Glary Tools Malware scanners: McAffe, Adaware Personal Firewall: Comodo Startups and services: Autoruns – use this to identify startups and services that can be disabled.

5. Minimal Configuration Uninstall un-necessary applications and services. Use a tool like Autoruns or MSCONFIG to deactivate services. start->run: msconfig See castlecops.com for more info on startups and services. Bleepingcomputer.com/uninstall/all.html

6. Scanners Anti-Virus –Virus Scan Console –Configure the updates Anti-spyware/adware Update regularly (automatically) Choose scanners that can be run in safe mode.

7. Scanners (McAfee) Go to Auto Update and choose the schedule button to set the schedule for updates. Manual updates are possible by placing the.DAT files in the: Program Files\ Common Files\McAfee\Engine folder.

8. Browser IE is the default Are other browsers more secure? Configure to be secure –Deactivate ActiveX, JavaScript, Java –Tools->internet options Security tab Conduct browsing with a limited access account.

9. Browser Set –Internet zone http://surfthenetsafely.com/ieseczone8.htm –Trusted sites (default settings?) Consider a tool like SiteAdvisor Don’t use Autocomplete –tools-internet options->content tab Disable the features AutoComplete

10. Registry Maintenance Flush the System Restore –Click the “System Restore Settings” in the wizard. –(check) Turn off System Restore. This will delete your old checkpoints. –Turn on System Restore –Run a registry cleaner/check before making a new checkpoint.

11. Registry Backup Run a registry checker/cleaner (Glary tools). –Backup the registry and create a checksum (hash) (see next slide) –Consider MD5Summer as a way to checksum all files in the registry. –Optional: Encrypt the backup and hash information or store it on removable secure media.

12. Registry Backup Start->run->Open: regedit File -> Export Choose a name and location for the registry backup file. Save it. Create a hash for the backup file. Place the hash in a text file. Encrypt the hash and backup file. –Properties -> advanced Copy to external media

13. Archival-Backups Things to backup –Personal data and settings –Registry Windows has a backup utility: Accessories->System Tools->Backup

14. Disk Maintenance Disk Clean Up –System Tools ->Disk Cleanup De-fragmenting (in safe mode) –System Tools -> De-fragment

15. Disabling Autoruns Right click the icon for the device Choose the AutoPlay tab Select each type in the drop down list –Select “no action” for each item in the drop down list (menu) –Apply –OK

16. Scan new media Use your scanners to scan any media inserted in your computer before opening files on the media

17. File Display Show the extensions on file names –Double click My Computer, go to Tools -> file options. –Also show hidden files and folders –http://www.granneman.com/techinfo/windows/ showextensions/

18. Firewall For a notebook computer, use a personal firewall. Disable the Windows default firewall when you install your software personal firewall. Configure it correctly. Update regularly and automatically.

19. Encryption Encrypt important files stored on your computer Note: important files should be archived to WORM media and stored in a secure place.

20. E-mail Deactivate preview panes.