Professional Information Technology-Programming Book part 158 ppsx

Disable Recent Shares in Network Places Windows 2000/XP This restriction stops remote shared folders from being added to Network Places whenever you open a document in the shared folder

being targeted with a SYN flood attack (a type of denial of service attack) When enabled the connection responses time out more quickly in the event of an attack

Disable Web Printing (Windows 2000/XP)

This restriction enables and disables server support for Internet printing Internet printing lets you display printers on Web pages so they can be viewed, managed, and used across the Internet or an intranet

Disable Recent Shares in Network Places (Windows 2000/XP)

This restriction stops remote shared folders from being added to Network Places whenever you open a document in the shared folder

Offload IP Security Task Processing (Windows 2000/XP)

This setting is used to control whether IP Security (IPSEC) tasks should be

offloaded to a network card with IP security capabilities

Specify Users to Receive Administrative Alerts (Windows NT/2000/XP)

This setting is used to specify a list of users and/or computers that should receive administrative alerts

Send Plain Text Passwords (All Windows)

When connecting to some SMB servers, such as Samba and LAN Manager for UNIX, you may be required to send unencypted password This setting enables that functionality

Disable Save Password Option in Dial-Up Networking (Windows NT/2000)

When you dial a phonebook entry in Dial-Up Networking (DUN), you can use the 'Save Password' option so that your DUN password is cached and you will not need to enter it on successive dial attempts This key disables that option

Restrict Anonymous User Access (Windows NT/2000/XP)

Windows has a feature where anonymous users can list domain user names and enumerate share names Users who want enhanced security may optionally restrict this functionality

Changing LAN Manager Authentication on Windows NT (Windows NT)

Windows NT supports two kinds of challenge/response authentication:

LanManager (LM) and Windows NT (NTLM) LM authentication is not as strong

as Windows NT authentication so some customers may want to disable its use, because an attacker sniffing the network traffic could possibly attack the weaker protocol

Disable TCP/IP Source Routing (Windows NT 4.0)

Normally, on a computer running Windows NT 4.0, you cannot disable the source routing feature for the TCP/IP protocol By using this tweak it is possible to disable

it

Hide the Active Directory Folder in My Network Places (Windows 2000)

This restriction is used to remove the Active Directory folder from My Network Places This still allows users to search but not browse the Active Directory

Hide Computer from the Browser List (Windows NT/2000/XP)

If you have a secure server or workstation you wish to hide from the general

browser list, then enable this setting

Hide Entire Network in Network Neighborhood (All Windows)

Entire Network is an option under Network Neighborhood that allows users to see all the Workgroups and Domains on the network Entire Network can be disabled,

so users are confined to their own Workgroup or Domain

Hide Workgroup Content from Network Neighborhood (All Windows)

Enabling this option hides all Workgroup contents from being displayed in

Network Neighborhood

Remove the Map and Disconnect Network Drive Options (Windows

NT/2000/XP)

Prevents users from making additional network connections by removing the Map Network Drive and Disconnect Network Drive buttons from the toolbar in

Explorer and also removing them from the Context menu of My Computer and the Tools menu of Explorer

Disable Caching of Domain Password (Windows 95/98/Me)

Enabling this setting disables the caching of the domain passwords, and therefore passwords are required to be re-entered to access any additional domain resources

Hide Share Passwords with Asterisks (All Windows)

This setting controls whether the password typed when accessing a file share is shown in clear text or as asterisks

Hide Computers Near Me in Network Places (Windows 2000/Me/XP)

This setting allows you to show or hide the computers listed Near Me in My

Network Places

Disable the Ability to Remotely Shutdown the Computer Browser Service

(Windows NT/2000/XP)

It is possible for a malicious user to shut down a computer browser, or all

computer browsers, on the same subnet If all of the computers on the same subnet are shut down, they can then declare their own computer the new master browser

Automatic Hidden Shares (Windows NT/2000/XP)

When networking has been installed on a Windows machine, it will automatically create hidden shares to the local disk drives It is possible to disable the sharing at run-time, but this tweak will stop the automatic sharing altogether

Require Validation by Network for Windows Access (Windows 95/98/Me)

By default Windows 9x doesn't require a valid network username and password combination for a user to bypass the logon and gain access to the local machine This functionality can be changed to require validation by the network before

allowing access

Changing the Password Expiry Warning Period (Windows NT/2000/XP)

This entry specifies the number of days before a user's password expires that a warning message is displayed

Disable the Automatic Creation of a Default Network Route (Windows NT)

This tweak controls the default behavior of Windows to add a network route to 0.0.0.0 on multi-homed machines (e.g proxy or firewall)

Home : Security : Privacy

Clear the Page File at System Shutdown (Windows NT/2000/XP) Popular

Windows does not normally clear or recreate the page file On a heavily used

system this can be both a security threat and performance drop Enabling this

setting will cause Windows to clear the page file whenever the system is shutdown

Reset Microsoft Word Settings and Recent Files (All Windows)

This setting can be used to reset the Word parameters back to the default if you are experiencing problems For example if you start Word and one of your toolbars or menu bars is missing, or if your personalized settings are not retained

Disable Network Messenger Service (Windows NT/2000/XP)

The Messenger service is normally used to transmit net send and Alerter service messages between clients and servers Recently it has been employed by marketers

for sending unsolicited advertising popups (SPAM) over the Internet This tweak allows you to disable this service

Clear Download Accelerator History (All Windows)

Download Accelerator Plus (DAP) is a tool used to retrieve files from Internet servers It stores a history of the files downloaded and URLs visited To increase privacy and security this tweak allows you to clear the history

Disable Recent Files in Media Player (All Windows)

This restriction will stop Windows Media Player from storing the names of the played media in the recent file list

Clear the Recent Play List in Media Player (All Windows)

This tweak allows you to clear the recent files, URL history and radio stations in Windows Media Player

Empty Temporary Internet Files on Exit (All Windows)

This setting controls whether Internet Explorer should delete all of the temporary Internet files stored during the session when the browser is closed

Clear the Cached Run Commands (All Windows)

Do you have a lot of items in the run command history on Start Menu? This tweak will allow you to clear the most-recently-used (MRU) list

Clear the Internet Explorer Typed Address History (All Windows) Popular

Internet Explorer caches any URLs that are typed into the address bar This may become a privacy issue on a shared computer, or a nuisance if there is a particular URL you want to remove without clearing the whole history

Disable User Tracking (Windows 2000/XP)

This setting stops Windows from recording user tracking information including which applications a user runs and which files and documents are being accessed

Clear the Netmeeting Call History (All Windows)

This tweak allows you to clear the stored call history in the Netmeeting drop down list

Home : Security : Remote Access

Configure Remote Access Client Account Lockout (Windows 2000/XP)

You can use the remote access account lockout feature to specify how many times

a remote access authentication has to fail against a valid user account before the user is denied access Use this tweak to set the number of failed logins before the account is locked-out and the time before the lockout is reset

Specify the Callback Pause Period (Windows NT/2000/XP)

When callback is required or requested this setting defines how long to wait before initiating the callback connection

Automatically Disconnect Remote Access Callers (Windows NT/2000/XP)

Specifies the amount of idle time in minutes to wait before disconnecting the

remote access client

Time Limit for Remote Access Authentication (Windows NT/2000/XP)

A time limit can be enforced on the period available to logon via remote access before the connection is terminated

Number of Remote Access Authentication Attempts (Windows NT/2000/XP)

This setting controls the number of authentication retries before a remote access connection is terminated

Disable Dial-In Access (Windows 95/98/Me)

It's possible for users to setup a modem on a Windows machine, and by using

Dial-up Networking allow callers to connect to the internal network Especially in a corporate environment this can cause a major security risk

Automatically Use Dial-Up Networking to Logon (Windows NT/2000)

There is an option that is available on the logon dialog box and allows you to dial into your logon server for authentication of your user account, this can be enabled

by default

Disable the "Log on using dial-up connection" Check Box (Windows NT/2000)

During logon Windows allows users to optionally connect to a Windows domain using dial-up networking, this tweak can be used to disable that option

Home : Security : Start Menu and Taskbar

Documents and Folders

Security Settings for Documents

and Folders