Basic Tutorials for Computer Security

[Oasisfactor]

If this post doesn't belong here, move it.

A little background:

I work at a place where they outsource the IT work and it's a hassle for the company. They have to wait days before they can get help. I only work as office support, but I have a background in Software Eng and Networking. I noticed a lot of carelessness when dealing with personal laptops. Often times they leave their laptops unattended where I can have physical access(gone out to smoke, lunch, etc..). They handle a lot of client data that isn't encrypted, and isn't properly deleted. The computer that I use at my desk has personal information I don't need access to, unencrypted. Some are even running on admin accounts.

What I want:

I was thinking of doing a tutorial and showing them how to protect their data, using encryption (BitLocker, Truecrypt), creating long/complex passwords, and basic computer security.

Any more ideas/suggestions are welcome.

 

[GokAy]

Long time ago, I was outsourced and it was similar to what you describe.

- Remove any admin privileges (may be a problem if IT support is not readily available)
- Enforce password requirements with Group Policy
- Remove all unnecessary software, cracks, etc.
- teach to use Win+L when they leave PC, mess with their desktop if they do
- Encryption may be a hassle

short list from top of my head.

 

[Oasisfactor]

Funny thing is, they have a local level Admin account that's disabled. I don't really understand why(I assumed it was for emergencies, incase they can't reach the domain, they have a local level admin account), since all the other accounts are on the domain.

When I was first hired, I had a bootable USB, I plugged it in and decided to boot from it. Never expected it would. Security is a joke there. I was able to enable the local level admin account, and install what I wanted, and even create another admin level account.

The issue with GP, is that they don't have direct access to the domain server, they have to call. So I was going to teach them about KeePass, and creating a long/complex password. Especially since they use there own laptops, and I can have access to it.

Encryption maybe a hassle, but it's necessary. Simply browsing of the downloads directory I found people SIN numbers, and personal information, ON A RECEPTIONIST COMPUTER! They certainly don't need this. I will teach it to them, and force them to learn it if I have to.