{"id":6551,"date":"2009-10-09T10:04:23","date_gmt":"2009-10-09T14:04:23","guid":{"rendered":"https:\/\/www.bu.edu\/tech\/?page_id=6551"},"modified":"2015-02-03T09:18:38","modified_gmt":"2015-02-03T14:18:38","slug":"windows","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/about\/security-resources\/bestpractice\/windows\/","title":{"rendered":"Securing Windows Systems"},"content":{"rendered":"

Microsoft Windows is one of the most widely used Operating Systems ever.\u00a0 The great popularity of the feature-rich operating system has come at a price: With millions of lines of code in Windows, the Operating System has required hundreds of patches to ensure that it can be securely used on the Internet.<\/p>\n

Unsecured computers that are directly connected to the Internet pose a threat to all users of the network.\u00a0 By compromising a single computer on a network, it may be possible an intruder to gain access to files, gather personal information, and disrupt the normal operations of the network.\u00a0 It is therefore imperative that we take precautions when connecting any computer to the campus network and Internet.<\/p>\n

There are several steps one should take to ensure to secure a Windows computer when connecting it to the campus network:<\/p>\n

    \n
  1. Activate the Windows Firewall<\/a> before<\/strong> connecting the computer to the network.\u00a0 Attacks can happen very quickly once a computer is connected, often with in minutes or even seconds.\u00a0 You may not have time after plugging in the network cord to activate the firewall before your computer is compromised.<\/li>\n
  2. Apply all current patches via Windows Update<\/a>.\u00a0 It may be necessary to reboot the computer several times during this process.\u00a0 You should repeat this step as needed until there are no more critical or recommended patches that need to be applied.<\/li>\n
  3. Turn on Automatic Updates<\/a> so that your computer will continue to receive patches as they are released.<\/li>\n
  4. Make sure all local accounts including the built-in local administrator or owner account have strong passwords.\u00a0 A strong password will be 6 or more characters in length, contain both numbers and letters as well as special characters, and not be found in a dictionary.\u00a0 Microsoft has advice on how to create strong passwords<\/a>.<\/li>\n
  5. Install and use virus protection software<\/a>.<\/li>\n
  6. Install and use spyware removal software<\/a>.<\/li>\n<\/ol>\n

    Keep Current!<\/h3>\n

    It is important to realize that the methods used to compromise computer security are constantly changing. Minimizing your computer’s risk of compromise is therefore not a one-time task. It is instead a process that must be repeated and reviewed to ensure your computer remains secure.<\/p>\n

    Learn about IS&T’s mailing lists for computer administrators<\/a> and join those that are appropriate for you.\u00a0 Also subscribe to your vendor’s security notification service. In addition to Microsoft Technical Security Notifications<\/a>, most software and hardware vendors have some sort of means of notifying their customers when security patches and or upgrades become available. Make sure you and your IT staff are on the list to receive relevant notifications.<\/p>\n

    Keep your software current. Many vendors, Microsoft included, only make security patches available for the most current releases of software. Be sure to know your vendor’s policies and plan accordingly.<\/p>\n

    Keep Clean!<\/h3>\n

    Every piece of software installed on a computer adds to the risk of compromise.\u00a0 Some software will install unexpected extras that may include viruses, spyware, or just unseen components that may be compromised later to gain access to your system.\u00a0 Unneeded software will often be neglected and left without updates, eventually leading to a compromise through neglect.\u00a0 Therefore we encourage you to install only the applications you need and only from trusted sources.\u00a0 When installing new software, be sure you have a backup of your system and do not install unknown software on critical servers.<\/p>\n

    Web browers and instant messenger clients are a common source of malware.\u00a0 While these products are often inextricable from a desktop system, their use on a server system should be carefully avoided.\u00a0 Many unpatched vulnerabilities exist for today’s browsers and websites with malicious code hidden within exist just waiting to trick unsuspecting users into accessing them.\u00a0 When using a web browser as a user with administrator privileges be sure to only browse known websites such as www.microsoft.com.<\/p>\n

    Protect University Data!<\/h3>\n

    University data, including student data, financial records, and health information require special protections and handling.\u00a0 Contact your Data Security Administrator <\/a>for advice on safe handling of university data.<\/p>\n

    Do not install any unnecessary applications or free\/share ware on any system you care about or can not easily restore from scratch.<\/p>\n

    Many modern viruses are taking advantage of all versions of instant messaging applications such as IRC, MSN, and AOL to install trojan and spyware software on systems without your knowledge. Applications of this nature have no business on a workstation <\/strong>housing university data. Use caution when using any application of this type and be sure to read the product documentation indicating how to secure the application on workstations determined to benefit (if any) from this type of application.<\/p>\n

    Refrain from browsing the web from a <\/strong>“critical” workstation. Use caution when browsing any untrusted websites.<\/p>\n

    Promote Awareness about Computer Security<\/h3>\n

    Many of our incidents originate from end-user actions whether they have installed new software, answered a phishing email, or disabled antivirus software.\u00a0 Computer administrators cannot hope to keep computer secure unless we make computer users more aware about the importance of computer security.<\/p>\n

    Resources<\/h3>\n