Need an opinion for a security strategy


  1. whs
    Posts : 26,210
    Vista, Windows7, Mint Mate, Zorin, Windows 8
       #1

    Need an opinion for a security strategy


    The people of my local computer club asked me to recommend a security setup for the club computers. Those are XP, Vista and Win7 - more than a dozen all together and most are double or triple booting. Some also have Ubuntu on them, but that is not used a lot.
    They were recently hammered with viruses, in part apparently because people used contaminated USB sticks on them. Up to now, free AVG was installed. But obviously nobody really did a regular update.
    I plan to recommend MSE and the windows firewall because that works well for me and there is no additional cost. But I wonder whether any of you has a better recommendation - especially for the XP systems because I do not have any of those and thus no idea what's good for them.
    Your input is appreciated.
      My Computer


  2. Posts : 759
    W7-Enterprise + WS-2008 (Converted to Workstation)
       #2

    hi !

    one quick: turn off "Autoplay".
      My Computer


  3. jav
    Posts : 713
    Windows 7 Ultimate x86 SP1
       #3

    If it computers on the club and they only need things on it and don't write anything to it.
    Then maybe light virtualization solutions like:
    Faronics Deep Freeze Windows Editions - ABSOLUTE System Integrity
    Shadow Defender - the easiest PC/laptop security and privacy protection tool
    Returnil - The Real Security for your home or business - Download RVS now to protect your PC.
    StorageCraft ShadowUser - Product Details

    Or Anti executables:
    Faronics Anti-Executable - Application Whitelisting for Endpoint Security
    Horizon DataSys Inc. - Executable Lockdown Whitelist AUPs

    Windows features:
    Anti executeble (whitelisting):
    SRP (Software Restriction Policy)
    How to make a disallowed-by-default Software Restriction Policy
    PGS - Pretty Good Security - Wilders Security Forums (It will make your task easier with SRP)

    Applocker (only Windows 7 Enterprise and Ultimate)
    http://207.46.16.252/en-us/magazineb...alltrades.aspx
    http://technet.microsoft.com/en-us/l...86(WS.10).aspx


    And I will recommend putting all computer under LUA (Limited User Account) and put UAC (User Account Control) level on maximum and turn off autoplay atleast. (this will make it harder for users to "sabotage" computers)

    Overall, in seeking Ideas and suggestion on Security setup I found this article very usefull: Securing Your PC and Data - Wilders Security Forums
    It;s made by BlueZanetti, Administrator of the wilderssecurity forum which is one of the well known security forums.

    Hope it will help you.

    P.S. I can't belive that when I first registered on sevenforums I was asking suggestions and had almost no idea about all this.
    I Thank everybody who helped me.
    Last edited by jav; 05 Jan 2010 at 19:08.
      My Computer


  4. whs
    Posts : 26,210
    Vista, Windows7, Mint Mate, Zorin, Windows 8
    Thread Starter
       #4

    thanks guys. Turning Autoplay off is definitely a good idea. And jav, I will have a look at all your links (will keep me busy for the rest of the night - LOL). But things are being written to the systems during the hands-on classes. And I also want to keep things as simple as possible because a lot of the members are plain beginners and could not deal with fancy setups - else i would have suggested a sandbox for the hands-on. The setup must be transparent to them.
      My Computer


  5. Posts : 1,443
    Win 7 Ultimate SP1 x64
       #5

    You could try using these to remove/disable autorun.inf viruses from spreading to your pc.It's freeware...:)Hope this helps you.

    Panda USB and AutoRun Vaccine | Panda Research Blog

    http://oldmcdonald.wordpress.com/
      My Computer


  6. Posts : 1,426
    7 Pro
       #6

    non-admin accounts :P
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 23:06.
Find Us