Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Need an opinion for a security strategy

05 Jan 2010   #1
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 
Need an opinion for a security strategy

The people of my local computer club asked me to recommend a security setup for the club computers. Those are XP, Vista and Win7 - more than a dozen all together and most are double or triple booting. Some also have Ubuntu on them, but that is not used a lot.
They were recently hammered with viruses, in part apparently because people used contaminated USB sticks on them. Up to now, free AVG was installed. But obviously nobody really did a regular update.
I plan to recommend MSE and the windows firewall because that works well for me and there is no additional cost. But I wonder whether any of you has a better recommendation - especially for the XP systems because I do not have any of those and thus no idea what's good for them.
Your input is appreciated.


My System SpecsSystem Spec
.
05 Jan 2010   #2
hackerman1

W7-Enterprise + WS-2008 (Converted to Workstation)
 
 

hi !

one quick: turn off "Autoplay".
My System SpecsSystem Spec
05 Jan 2010   #3
jav

Windows 7 Ultimate x86 SP1
 
 

If it computers on the club and they only need things on it and don't write anything to it.
Then maybe light virtualization solutions like:
Faronics Deep Freeze Windows Editions - ABSOLUTE System Integrity
Shadow Defender - the easiest PC/laptop security and privacy protection tool
Returnil - The Real Security for your home or business - Download RVS now to protect your PC.
StorageCraft ShadowUser - Product Details

Or Anti executables:
Faronics Anti-Executable - Application Whitelisting for Endpoint Security
Horizon DataSys Inc. - Executable Lockdown Whitelist AUPs

Windows features:
Anti executeble (whitelisting):
SRP (Software Restriction Policy)
How to make a disallowed-by-default Software Restriction Policy
PGS - Pretty Good Security - Wilders Security Forums (It will make your task easier with SRP)

Applocker (only Windows 7 Enterprise and Ultimate)
http://207.46.16.252/en-us/magazineb...alltrades.aspx
http://technet.microsoft.com/en-us/l...86(WS.10).aspx


And I will recommend putting all computer under LUA (Limited User Account) and put UAC (User Account Control) level on maximum and turn off autoplay atleast. (this will make it harder for users to "sabotage" computers)

Overall, in seeking Ideas and suggestion on Security setup I found this article very usefull: Securing Your PC and Data - Wilders Security Forums
It;s made by BlueZanetti, Administrator of the wilderssecurity forum which is one of the well known security forums.

Hope it will help you.

P.S. I can't belive that when I first registered on sevenforums I was asking suggestions and had almost no idea about all this.
I Thank everybody who helped me.
My System SpecsSystem Spec
.

05 Jan 2010   #4
whs
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
 
 

thanks guys. Turning Autoplay off is definitely a good idea. And jav, I will have a look at all your links (will keep me busy for the rest of the night - LOL). But things are being written to the systems during the hands-on classes. And I also want to keep things as simple as possible because a lot of the members are plain beginners and could not deal with fancy setups - else i would have suggested a sandbox for the hands-on. The setup must be transparent to them.
My System SpecsSystem Spec
05 Jan 2010   #5
D3ftOn3Z

Win 7 Ultimate SP1 x64
 
 

You could try using these to remove/disable autorun.inf viruses from spreading to your pc.It's freeware...Hope this helps you.

Panda USB and AutoRun Vaccine | Panda Research Blog

http://oldmcdonald.wordpress.com/
My System SpecsSystem Spec
06 Jan 2010   #6
brady

 

non-admin accounts :P
My System SpecsSystem Spec
Reply

 Need an opinion for a security strategy




Thread Tools




Similar help and support threads
Thread Forum
backup strategy
I want to backup my windows 7 ultimate desktop. I have 3 separate drives. C: drive is for OS, I also have dual boot with latest Ubuntu with it on the C: drive. I have a I: drive that has all my apps installed on this drive which is 800gig as raid 0 all apps, games etc. everythings works...
Backup and Restore
Bookmark strategy....FYI
Some may find this article interesting and useful...Hope you enjoy it. Bookmarks Available Anywhere - PCWorld
Chillout Room
Opinion about Agnitum Outpost Security Suite
Came across this recently December 30, 2010*— The industry’s first free security suite knocks out competing paid solutions Touts itself as better than commercial products, currently using ESET Smart security and planning on changing with this Outpost Security Suite ...
Software
Win7 security strategy for program install/use?
I just installed Win7 from XP and I'm having a tough time figuring out the best way to setup/use programs without totally disabling the UAC out of frustration. I'm trying not to disable it but it's pretty annoying. Can anyone give a general strategy for setting up the operating system within the...
System Security
Win 7 upgrade strategy
I'm running Vista 64 and plan to do a clean Win 7 install 10/22. I've upgrade before, but always manually backing up up the necessary files and settings. I have an external drive. But what about Easy File Transfer? Could I install Win 7 over Vista and use Easy File Transfer? 1. Install...
Installation & Setup


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 07:33.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App