Microsoft Windows Security

Microsoft Windows is subject to a variety of security issues. The main themes to remember for improving Microsoft Windows security are similar to any other operating system.

1. Keep all patches up to date for the operating system and applications. Visiting Windows Update with Internet Explorer is a good way to do this. Enabling Automatic Updates is highly recommended (see Microsoft's "Protect your PC")
2. Use a personal firewall. Windows XP has a built-in firewall that should be enabled. Other third party firewall packages such as Zone Alarm, Kerio Personal Firewall, and Mcafee Antivirus 8 are also valuable.
3. Always run anti-virus software and keep it up-to-date. Please see the Anti-virus links for more information.
4. Use strong passwords that are hard to guess but easy for you to remember. SIUC Password security guidelines
5. Do not run services or applications that you do not need.
6. Practice safe browsing habits - do not open content from non-trusted websites. Use a browser other than Internet Explorer if possible (Note: SIUC users often require IE due to integration with the Administrative Information System, but this does not mean you cannot use another browser for general web surfing). Mozilla Firefox is a good alternative.
7. Practice safe email habits - do not open unexpected attachments or applications sent to you through email. For more information on email security please visit the Email Security links.
8. Do not give out sensitive information such as credit card numbers, bank PIN numbers, or other financial information unless you are certain that you are dealing with a reputable company. Do not trust links to financial institutions that are sent through email - visit such websites by manually entering their main URL into your web browser.
9. Report any suspicious behavior to your computer support staff right away.

A wealth of Microsoft-based security information can be found on the Microsoft Technet Security website.

Microsoft Technet security - http://www.microsoft.com/technet/security
Microsoft Security tools - http://www.microsoft.com/technet/security/tools/
Microsofts "Protect your PC" http://www.microsoft.com/athome/security/protect/

References:

Tuning automatic updates on your workstations: http://www.windowsdevcenter.com/pub/a/windows/2004/02/10/automaticupdates.html

NSA hardening guidelines for Microsoft:
National Security Agency Operating System Hardening guides
http://www.nsa.gov/snac/downloads_os.cfm?MenuID=scg10.3.1.1

The NSA guidelines may cause functionality problems. Microsoft has
offered a detailed commentary on this subject.
http://support.microsoft.com/kb/885409/

Windows XP Security Guide:
http://go.microsoft.com/fwlink/?LinkId=14839

Windows Server 2003 Security Guide:
http://go.microsoft.com/fwlink/?LinkId=14845

Windows 2000 Security Hardening Guide:
http://go.microsoft.com/fwlink/?LinkId=28591

Center for Internet Security
(Microsoft OS benchmarks)
http://www.cisecurity.org/