WinXP: Securing Windows XP PC

  • Thread starter Thread starter Leezy
  • Start date Start date
L

Leezy

Dear All,

I would like to secure my PC in the domain. Is there anyway to do it?

I would like to remove administrator from the security tap in my Pc, and
only allow PC with user rights to access.

is that a good practice? thanks...
regards,
zhi
 
Dear All,
I would like to secure my PC in the domain. Is there anyway to do it?
I would like to remove administrator from the security tap in my Pc, and
only allow PC with user rights to access.
is that a good practice?

Yes, it is.
The best defenses are:
1. Do not work as administrator, use a limited user account (LUA) for
day-to-day work.
2. Secure (Harden) your operating system.
3. Keep your operating (OS) system (and all software on it)
updated/patched.
4. Reconsider the usage of IE and OE.
5. Review your installed 3rd party software applications/utilities;
Remove clutter
6. Don't expose services to public networks.
7. Activate the build-in firewall and configure Windows not to use
TCP/IP as transport protocol for NetBIOS, SMB and RPC, thus leaving
TCP/UDP ports 135,137-139 and 445 (the most exploited Windows
networking weak point) closed.
7a. If on high-speed internet use a router as well.
8. Routinely practice safe-hex.
9. Regularly back-up data/files.
10. Familiarize yourself with crash recovery tools and with
re-installing your operating system (OS).
11. Utilize a real-time anti-virus application and vital system
monitoring utilities/applications.
12. Keep abreast of the latest developments - Sh!t happens...you know.

The least preferred defenses are:
Myriads of popular anti-whatever applications and staying ignorant.

Good luck :-)
 
Yes, it is.
The best defenses are:
1.   Do not work as administrator, use a limited user account (LUA) for
     day-to-day work.
2.   Secure (Harden) your operating system.
3.   Keep your operating (OS) system (and all software on it)
     updated/patched.
4.   Reconsider the usage of IE and OE.
5.   Review your installed 3rd party software applications/utilities;
     Remove clutter
6.   Don't expose services to public networks.
7.   Activate the build-in firewall and configure Windows not to use
     TCP/IP as transport protocol for NetBIOS, SMB and RPC, thus leaving
     TCP/UDP ports 135,137-139 and 445 (the most exploited Windows
     networking weak point) closed.
7a.  If on high-speed internet use a router as well.
8.   Routinely practice safe-hex.
9.   Regularly back-up data/files.
10.  Familiarize yourself with crash recovery tools and with
     re-installing your operating system (OS).
11.  Utilize a real-time anti-virus application and vital system
     monitoring utilities/applications.
12.  Keep abreast of the latest developments - Sh!t happens...you know.

The least preferred defenses are:
Myriads of popular anti-whatever applications and staying ignorant.

Good luck :-)

Do not remove the Administrator account! This is an important account
that XP requires. Just place a password on the account and follow the
previous reply.

BTW: If this PC is part of a domain and you are not the Domain
Administrator, then you should not do any modifications to this PC.
 
Back
Top