Securing laptop

  • Thread starter Thread starter Steve
  • Start date Start date
S

Steve

Hi

Say we have a small LAN with all the basic protections (firewall, virus
software, etc.).

Now, if we need to connect a laptop that is not ours (say, belonging to a
business partner or an employee), I'm wondering what is a common approach
out there in terms of securing these outside devices. If they only need
internet connection, should they be isolated on separate LAN ?

On the other hand, if these laptops are ours and are set up to connect to
our domain everyday, would there be rules when used outside of our domain ?
What are the common ways to ensure security for laptops using, say, at home
network (or other company's network) and at office network ?

Thanks
Steve
 
If your lan is configured to keep computers updated promptly with critical
updates also, that will help protect from outside infected computers. Blaster
brought many a network down because of a single infected computer. Also be sure
that any shares have proper permissions and not the default everyone full
access. In addition you should be using complex passwords [as defined in
security policy/account policies] with a lockout policy of no less than ten
threshold. Having said that, I think it makes sense to have a separate
switch/network available to external users if you can set that up without too
much expense.

As far as your laptops having a personal firewall properly configured on them
with virus protection is a must. In addition try to not let your users be local
administrators as they can then do things like install unauthorized software,
unjoin the machine from the domain and disable the firewall and virus
protection. For laptops, I like XP Pro as you can really lock a user down with
Software Restriction Policies. --- Steve

http://support.microsoft.com/?kbid=310791
 
Back
Top