Re: Securing laptop
From: Steven Umbach (n9zrou_at_nscomcast.com)
Date: 01/25/04
- Next message: Steven Umbach: "Re: Logon fails, kind of"
- Previous message: Steven Umbach: "Re: Users can't change passwords"
- In reply to: Steve: "Securing laptop"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 24 Jan 2004 23:40:38 GMT
If your lan is configured to keep computers updated promptly with critical
updates also, that will help protect from outside infected computers. Blaster
brought many a network down because of a single infected computer. Also be sure
that any shares have proper permissions and not the default everyone full
access. In addition you should be using complex passwords [as defined in
security policy/account policies] with a lockout policy of no less than ten
threshold. Having said that, I think it makes sense to have a separate
switch/network available to external users if you can set that up without too
much expense.
As far as your laptops having a personal firewall properly configured on them
with virus protection is a must. In addition try to not let your users be local
administrators as they can then do things like install unauthorized software,
unjoin the machine from the domain and disable the firewall and virus
protection. For laptops, I like XP Pro as you can really lock a user down with
Software Restriction Policies. --- Steve
http://support.microsoft.com/?kbid=310791
"Steve" <none@none.com> wrote in message
news:OwVZHEi4DHA.632@TK2MSFTNGP12.phx.gbl...
> Hi
>
> Say we have a small LAN with all the basic protections (firewall, virus
> software, etc.).
>
> Now, if we need to connect a laptop that is not ours (say, belonging to a
> business partner or an employee), I'm wondering what is a common approach
> out there in terms of securing these outside devices. If they only need
> internet connection, should they be isolated on separate LAN ?
>
> On the other hand, if these laptops are ours and are set up to connect to
> our domain everyday, would there be rules when used outside of our domain ?
> What are the common ways to ensure security for laptops using, say, at home
> network (or other company's network) and at office network ?
>
> Thanks
> Steve
>
>
>
- Next message: Steven Umbach: "Re: Logon fails, kind of"
- Previous message: Steven Umbach: "Re: Users can't change passwords"
- In reply to: Steve: "Securing laptop"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|