Okay, I thought I would add another tutorial quickly. Thios one is for those people who have shared computers and want to make sure that others do not screw the PC’s up when using them. For this we use a tool called Steadystate, which can be downloaded from Microsoft. Steadystate is the best security tool yet, and is great for standalone PC’s not on a Domain Network or covered by Group Policy. Steadystate also works nicely with Group Policy as well.

You can get Steadystate from http://www.microsoft.com/downloads/details.aspx?FamilyId=D077A52D-93E9-4B02-BD95-9D770CCDB431&displaylang=en

Once installed, you need to create a new user. I have only 1 other user on my systems, apart from Administrator, as all users are Domain Users. (Guest User)

Now, click the user you have created, it’s time to get restrictive!

I enable time restrictions on the PC and enable the logoff timer, so that my users can see how long they have left. It is also a good idea to lock the profile of the user, so that thay cannot make any changes. (This is called a Manitory Profile)

Now click the Windows Restrictions Tab

It is up to you how lenient you are with your restrictions. For this Guest user, I have been seriouslly restrictive and have locked off many features and also have locked off the C:\ Drive and the E:\ Drive for security, only allowing access to the DVD RW Drive.  Users can only save to Drive I: and to Floppy \ DVDRW or CDRW. To apply a restriction, just check the relivent box.

OK lets move on to Feature Restrictions

Again, check the boxes for the features you want disabling. This tab allows you to block various features in Internet Explorer, Office and other software. You can also set the homepage for Internet Explorer or allow a certtain page to be accessed from the user account. (great for Children, using the PC)

Finally, we move to the Blocked Programs Tab

This allows you to block various programs, such as Internet Explorer or Card Games. To block a program, click it’s name and click the Blocked button to move it to the blocked list.

When you are ready, click OK to apply all restrictions.

Finally, if you want Steadystate to manage your Computer Updates, select the option on the main screen. You can also protect the hard drive from changes (Not Recommended unless you are on a Domain Network) and set global restrictions.

Now all that is left to do is click Start > logoff and login as your new user and enjoy Steadystate Protection for your family and your PC!

Next week’s tutorial: Hacking MSGina.DLL to customise your Windows Classic Logon Screen.

Okay, this post is going to give you a few tricks on how to secure your XP Workstation and make it run a alot better. This should not take longer than a hour to make all the changes needed, to secure your pc, but if you are on a slow PC or dialup, it make take a bit longer.

1st, make sure your version of windows has Service Pack 2 installed. If your version of XP is quite recent, you will likly have SP2 allready installed. If not, you can installl it from Windows Update.

http://windowsupdate.microsoft.com

Next, configure Automatic Updates for your Computer

Click Start > Settings > Control Panel > Automatic Updates

Select Automaticlly Update My Computer (Recommended)

Select the time you wish to download the updates

Click Appy and OK

Next, enable the Windows Firewall from Control Panel. If you are using a router with a hardware firewall, it is still a good idea to enable this firewall as 2nd defence. You may need to configure your programs to run via the software firewall, by clicking advanced, clicking the checkbox by the program you wish to enable and clicking apply. Othwerwise, you can browse for the program you wish to make a rule for.

Handy Hint: If you are on a Network, remember to enable File and Printer Sharing, or your Network Resources will not work!

Download a Antivirus program on your PC. I suggest AVG, as that gets rid of 99% of all heebie Jeebies.

Download AVG Free from http://free.avg.com

Next, install Antispy. I suggest Adaware Free, which deep scans the registry and removes all spyware.

Download Adaware SE from www.adaware.com

Next, run your Virus and Spyware scanners. I suggest either pulling out your Ethernet cable or disabling the connecttion while you do this.  I usually run this in Safe Mode, by tapping F8 as Windows starts, which is another option.

Disable Windows Messenger, is something you should all do. You don’t need it, now you can download and install Windows Live Messenger.

Click Start > Settings > Control Panel > Add Remove Programs

Click the Add Remove Windows Componants Tab

Select Windows Messenger and uncheck the box

Click Apply then OK

Go to: http://messenger.msn.com

Select the software you wish to install (I choose none on the 1st page)

Click Download

Select Run when prompted

Follow the Setup Wizard

Backup your System Registry

Click Start > Run

Type “REGEDIT” without the quotes and hit OK

Click File

Export

Put a floppy in your A:\ drive and save the backup as Registry.reg

Put the floppy in a safe place

Disable Auto Login on your Computer

Click Start > Run

Type control userpasswords2 and click Ok

Check the box that says Users Must Logon to this Computer with a Username and Password

Click Apply but not OK as we will be coming back to this in a minute

Put a password on your Windows Account to stop unauthorised access

In the dialog box friom a minute ago, choose your user and click Reset Password

Type your new password and the  type it again and click OK. Do not close User Accounts yet! We still have work to do!

Rename the Administrator’s Account. I do this for security reasons.

In User Accounts, Double click Administrator

Under the field Username, choose a new value ( I call Administrator Net Admin on my PC’s)

Click Apply and Ok

Do not close User Accounts yet, thwere is 1 more job to do!

Make sure Users need to use CTRL +ALT + DEL if using Classic Logon

If you have changed your login settings in Control Panel . User Accounts to Classic Login, which I recommend, you need to enable CAD on Login.

Click the Advanced Tab and check the box next to Require users to press CTRL +ALT + DEL to login

Click Appy and OK

Finally, as you have been messing about with various settings, restart the PC

Click Start > Shut Down > Restart

Remember to press CTRL +ALT +DEL at the login screen to login. Also press the Windows Key and L when you walk away from your PC, as this locks the workstation.

Download a drive cleaning program to clean your hard drive of tempory files.

I suggest CC Cleaner (Freeweare) http://www.ccleaner.com/ or Webroot Window Washer (Shareware) www.webroot.com

Download, install and run one of these programs. It will clear your tempory files, cache, cookies and various other tempory files that cake up your hard disk

Finally, Defragment your hard drive

Click Start >  Programs > Accessories > System Tools > Defragment

Click Defragment, as this will analize and defragment the volumes on your PC. I don’t bother clicking analize as it is not that acurite.

Coming Later…. How to secure your PC using Steadystate.