Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Security -- Some basic Questions

1 Week Ago   #1
dw85745

Win 7 Pro x32
 
 
Security -- Some basic Questions

Note: see: Security with Someone Elses ActiveX



Following is somewhat duplicate post of above (with more questions)

------------------
Background
------------------

secpol.msc appears to be where Microsoft addresses system security.
But we have other areas such as Services that are running.

Also like most people I have some software written by someone else.
That software uses various API's in order to function. However, API's are a two edge sword.
They can be used for both good or bad.
So how does one determine what that software is in fact doing.
"CALL HOME" is a simple example of this issue.

----------------
Questions
'--------------
1) Is there anyway to determine what affects what on the system?
For example if one checks certain boxes in secpol.msc, will ths override a particular "service(s)"
and if so what "service(s) are affected. Conversely, if one toggles a service, will that override
settings in secpol.msc.

2) Wireshark and other software can be used to monitor traffic. However, for calls made from within,
such as "Call Home" -- that occur infrequently -- how does one identify that piece of software?


Example/Clarification:
DEP as I understand it is still dealing with an outsider (e.g. virus) getting in - or having got in -- and then accessing memory in a Process it is not supposed to have access to. What I'm trying to address is 3rd party software getting out and how to monitor it.
For example, say I install program A -- or -- receive an ActiveX control (or library) to be used to link to someone elses server. I need the program or the ActiveX. However, the vendor will Not provide the source code for the software or the ActiveX. Hence, I really have no knowledge what is embedded in that code. Just like Call Home, when the software is installed who knows what went on behind the scenes. With the ActiveX I have a little more control, but since it is interfacing with someone elses server, embedded in that ActiveX can be APIs calls to do whatever. While DEP --hopefully -- would limit access outside of the Process that is executing the ActiveX, the ActiveX still would have access to the code in which it is embedded and I'm NOT real sure what else (??? basis for question) . So can one control any of this or is it back to the "TRUST" issue with No VERIFY?

3) Is there a master list of where to go and what affects what in regard to system security?


My System SpecsSystem Spec
.
Reply

 Security -- Some basic Questions




Thread Tools




Similar help and support threads
Thread Forum
Basic questions about using Windows 7
How do you do a hard drive search in Windows 7? How do you explore? How do you get to the option of opening all folders in the same window or each in its own window? Thanks for any help! David
General Discussion
New to Win 7 pro 64 - Serious basic questions
Had this new Dell for about a month - delivered with Win 7 Pro x64 SP1 installed. 1st thing - made a system image disk set - using Dell utility. 2nd - Tried to make a rescue disk - Dell Utility looks for a USB drive greater than 100mg < 3 TB. instered 16 Gig thumb drive - NOPE - wants an...
Windows Updates & Activation
New laptop with Win 7 and some basic questions
I am getting a new laptop for Christmas and will be using Win 7 64bit for the first time. I've been using Win XP and since I was the only one using the laptop, I only had an admin account which I now know is a big no-no. So..... I will be creating an admin account and a user account with...
General Discussion
Sr. Citizen Basic Questions, Please
Hello, Will blame my inability to figure this out on my age now. Would be most grateful for any help. New PC; trying to get everything set up. Boy, it sure is different than my old one with XP. a. During the first turn-on, it asked for a Password, which I assigned. I really don't...
Installation & Setup
A Few Very Basic Questions Re a Cat 5e Cable
Hello, Really showing my ignorance here, but please bear with me. a. When going from my Comcast modem (broadband) to the input of a new PC, I guess I will need a Cat 5e cable. Do I want the "Crossover" type ? (if not, just so I can learn, how and where is a "Crossover" type used ?)
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:04.
Twitter Facebook Google+