Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: securing windows 7 32/64 bit in a domain environment

24 Feb 2010   #1
Firestrider

Linux (Debian, Android)
 
 
securing windows 7 32/64 bit in a domain environment

Hey I need your guys' sugguestions on what to do to secure windows 7 in a domain environment

what we've done so far is set most people to a standard user, set UAC to the second notch from the top, have DEP enabled for third party programs, have the default policy set in windows firewall advanced (is this controlled by sysadmin?), disabled fast user switching, and have a daily scan antivirus with central console and biweekly reports emailed (symantec endpoint).

Of course we try to keep all software up to date with separate updaters (like flash and acrobat) and windows updates through WSUS. IE8 is also in protected mode. Is there anything else we can do?


My System SpecsSystem Spec
.

24 Feb 2010   #2
JonM33

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by Firestrider View Post
Hey I need your guys' sugguestions on what to do to secure windows 7 in a domain environment

what we've done so far is set most people to a standard user, set UAC to the second notch from the top, have DEP enabled for third party programs, have the default policy set in windows firewall advanced (is this controlled by sysadmin?), disabled fast user switching, and have a daily scan antivirus with central console and biweekly reports emailed (symantec endpoint).

Of course we try to keep all software up to date with separate updaters (like flash and acrobat) and windows updates through WSUS. IE8 is also in protected mode. Is there anything else we can do?
I would hope that you have someone MCSE certified handling the set up of this domain. That person should be able to handle it without a problem. If it is security you are worried about, find someone with a CISSP certification.
My System SpecsSystem Spec
25 Feb 2010   #3
Firestrider

Linux (Debian, Android)
 
 

Really I'm just looking for what can be done on workstations and laptops and implemented in an operating system image, as I only work as help desk support. Anything that needs to be done by group policy I can ask our system administrator.
My System SpecsSystem Spec
.


25 Feb 2010   #4
jav

Windows 7 Ultimate x86 SP1
 
 

Maybe implement SRP or AppLocker?

http://technet.microsoft.com/en-us/l...92(WS.10).aspx
My System SpecsSystem Spec
Reply

 securing windows 7 32/64 bit in a domain environment




Thread Tools





Similar help and support threads
Thread Forum
Securing an online magazine
Good day dears, Not sure where I can find what I am searching for; pls advise if you can; I am trying to find a way where only subscribers can read an online magazine and denying them to share its content 'free' with others. Is there a type of file I can secure or an online security way for...
Browsers & Mail
Preparing/ securing a used desktop to sell
Hello, I have a Dell desktop, about 3.5 years old running Windows 7 Home Premium 64 bit. It has served us well. We now have two laptops and I want to get all my data off of it and sell it. Basically used it for surfing the internet and home videos/ pictures. How can I securely wipe the memory...
General Discussion
Securing a zip file
I need to send, via email, some tax related files to my accountant ( doc, xls, pdf etc) I thought the easiest way to do this, with some level of secrity/deterrent , would be to zip them and apply some security/encryption. I currently have no zip software other than native Win 7 (send to...
Software
Windows Update Doesn't Work in Domain Environment
I'm trying to set up a new PC around the office, but as soon as I establish a connection to the domain, Windows Update keeps giving me ERROR: 8024402F. This may sound wacky, but I've narrowed the problem down to the clock (as in time). After checking the Event Viewer logs I found this... Log...
Windows Updates & Activation
Domain Group Policy 2003 environment & Windows 7 clients
Whenever I log in to windows 7 using my test AD account I only see 3 icons inside control panel.... When I log in to XP using the same AD account I see all the control panel icons that Im supposed to see according to my GP settings. So it looks like my GP is NOT working properly for windows 7...
System Security
Windows 7: A New Approach to Securing Today’s Enterpris
More...
News

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 15:06.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App