Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Need an opinion for a security strategy

05 Jan 2010   #1
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8
Need an opinion for a security strategy

The people of my local computer club asked me to recommend a security setup for the club computers. Those are XP, Vista and Win7 - more than a dozen all together and most are double or triple booting. Some also have Ubuntu on them, but that is not used a lot.
They were recently hammered with viruses, in part apparently because people used contaminated USB sticks on them. Up to now, free AVG was installed. But obviously nobody really did a regular update.
I plan to recommend MSE and the windows firewall because that works well for me and there is no additional cost. But I wonder whether any of you has a better recommendation - especially for the XP systems because I do not have any of those and thus no idea what's good for them.
Your input is appreciated.

My System SpecsSystem Spec
05 Jan 2010   #2

W7-Enterprise + WS-2008 (Converted to Workstation)

hi !

one quick: turn off "Autoplay".
My System SpecsSystem Spec
05 Jan 2010   #3

Windows 7 Ultimate x86 SP1

If it computers on the club and they only need things on it and don't write anything to it.
Then maybe light virtualization solutions like:
Faronics Deep Freeze Windows Editions - ABSOLUTE System Integrity
Shadow Defender - the easiest PC/laptop security and privacy protection tool
Returnil - The Real Security for your home or business - Download RVS now to protect your PC.
StorageCraft ShadowUser - Product Details

Or Anti executables:
Faronics Anti-Executable - Application Whitelisting for Endpoint Security
Horizon DataSys Inc. - Executable Lockdown Whitelist AUPs

Windows features:
Anti executeble (whitelisting):
SRP (Software Restriction Policy)
How to make a disallowed-by-default Software Restriction Policy
PGS - Pretty Good Security - Wilders Security Forums (It will make your task easier with SRP)

Applocker (only Windows 7 Enterprise and Ultimate)

And I will recommend putting all computer under LUA (Limited User Account) and put UAC (User Account Control) level on maximum and turn off autoplay atleast. (this will make it harder for users to "sabotage" computers)

Overall, in seeking Ideas and suggestion on Security setup I found this article very usefull: Securing Your PC and Data - Wilders Security Forums
It;s made by BlueZanetti, Administrator of the wilderssecurity forum which is one of the well known security forums.

Hope it will help you.

P.S. I can't belive that when I first registered on sevenforums I was asking suggestions and had almost no idea about all this.
I Thank everybody who helped me.
My System SpecsSystem Spec

05 Jan 2010   #4
Microsoft MVP

Vista, Windows7, Mint Mate, Zorin, Windows 8

thanks guys. Turning Autoplay off is definitely a good idea. And jav, I will have a look at all your links (will keep me busy for the rest of the night - LOL). But things are being written to the systems during the hands-on classes. And I also want to keep things as simple as possible because a lot of the members are plain beginners and could not deal with fancy setups - else i would have suggested a sandbox for the hands-on. The setup must be transparent to them.
My System SpecsSystem Spec
05 Jan 2010   #5

Win 7 Ultimate SP1 x64

You could try using these to remove/disable autorun.inf viruses from spreading to your pc.It's freeware...Hope this helps you.

Panda USB and AutoRun Vaccine | Panda Research Blog
My System SpecsSystem Spec
06 Jan 2010   #6


non-admin accounts :P
My System SpecsSystem Spec

 Need an opinion for a security strategy

Thread Tools

Similar help and support threads
Thread Forum
Looking for a strategy..
....every few months things seem to go wrong. Nothing big. Just a little problem here and a little problem there. Eventually, the little things become a big thing and so I am forced to deal with it. In the past, I have done one of two things: Run the upgrade from the install disk or erase...
General Discussion
backup strategy
I want to backup my windows 7 ultimate desktop. I have 3 separate drives. C: drive is for OS, I also have dual boot with latest Ubuntu with it on the C: drive. I have a I: drive that has all my apps installed on this drive which is 800gig as raid 0 all apps, games etc. everythings works...
Backup and Restore
Opinion about Agnitum Outpost Security Suite
Came across this recently December 30, 2010*— The industry’s first free security suite knocks out competing paid solutions Touts itself as better than commercial products, currently using ESET Smart security and planning on changing with this Outpost Security Suite ...
Win7 security strategy for program install/use?
I just installed Win7 from XP and I'm having a tough time figuring out the best way to setup/use programs without totally disabling the UAC out of frustration. I'm trying not to disable it but it's pretty annoying. Can anyone give a general strategy for setting up the operating system within the...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 07:13.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App