[Hidden-tech] Windows security (sic)

[Andy Klapper]

Bobbi,

On XP you go to Start->Control Panel -> User Accounts.

Create a new user and select "Limited" account.  According to the blurb you
will not be able to install new software and will only be able to modify
files that you created or are in your documents directory.  Despite what
some people have claim here, though I have not tried this myself, I suspect
that you will not be able to run windows update (at least the install
updates part) from this account.  There is also a warning that non-XP
certified applications may also not be able to run from this account.  My
guess on this is some older applications kept files that they modified
within the c:\Program Files directory, which this limited account will
prevent you from doing (along with computer viruses and worms).  If you
mostly use Microsoft products then this shouldn't be a problem.

If you don't want to give up on using IE I cannot tell you exactly how I
have mine configured since I start out with medium security and just go
through all the options and flip things that I think are unsafe, leaving me
with a customized security model.  But here are a few things ...

(under options, security)
.NET Framework-reliant components -> if they are signed allow them to run,
if they are not signed prompt me.
ActiveX controls -> I let ActiveX controls run, but I ask that I get
prompted before one gets downloaded (I'm taking some risk, but the theory is
I can have less prompts if I only allow controls that I trust onto my
machine in the first place).  I also disable the downloading of unsigned, or
marked as unsafe ActiveX controls.

Java -> High Safety, unable to access databases, disable scripting of IE
controls, disable script-initiated windows, use pop-up blocker, ...

(under privacy I check block pop-ups, somewhere I tell IE that I want to be
prompted for all cookies)

If you don't want to buy an anti-virus product then I would at least
download a copy of Microsoft's free Anti-Spyware software.  As mentioned by
others run auto-update, reboot, repeat until there is nothing left to
update.




Andy.




-----Original Message-----
From: hidden-discuss-bounces at lists.hidden-tech.net
[mailto:hidden-discuss-bounces at lists.hidden-tech.net]On Behalf Of Bobbi
Melville
Sent: Tuesday, May 31, 2005 9:56 AM
To: hidden-discuss at lists.hidden-tech.net
Subject: RE: [Hidden-tech] Windows security (sic)

   ** Be a Good Dobee and help the group
   ** Fill out the survey/skills inventory in the member's area.
   ** Remember you must be counted to post .

OK guys.

I've been following this thread as best I can. I'm primarily a Mac
user, but I do use PC's as well. My PC laptop, which is on-line daily
for a couple of hours, had 2 adwares last week. I'd like to make it
more secure. Could one of you please tell us how to set up
an account with very few privileges under Windows? I'd do it tonight
if I knew how.


Thanks,

Bobbi
--
Bobbi Melville
Publicity & Graphic Services

Phone   413 369-8022
Cell    413 335-2141
Fax     413 369-4257
Mail    PO Box 611, Conway, MA 01341-0611, USA
FedEx, UPS address: 1356 Ashfield Road, Conway, MA 01341, USA

Design, marketing, and information management
of projects and programs

_______________________________________________
Hidden-discuss mailing list - home page: http://www.hidden-tech.net
Hidden-discuss at lists.hidden-tech.net

You are receiving this because you are on the Hidden-Tech Discussion list.
If you would like to change your list preferences, Go to the Members
page on the Hidden Tech Web site.
http://www.hidden-tech.net/members