Re: User Accounts - Internet and Firewall Problems

From: Juergen Heinzl (sigsegv_at_web.de)
Date: 07/03/04


Date: Sat, 3 Jul 2004 01:57:53 +0200


"Gaya" <gaya4@freenet.de> schrieb im Newsbeitrag
news:2504901c4607f$2e85a4c0$a601280a@phx.gbl...
> Hello, i like to learn from Windows XP as a hobby, and
> knowing folders like my room;) my problem is now: i have a
> new user account, which is just restricted to use some
> programs, internet, and chatting, in order to connect
> WITHOUT a firewall to the internet. so that no
> worm/virus/dialer could install itself in the windows
> system. wrong thought. well i can remove them one by one,
> and i can evenstop iruses to do it. they use mainly
> tftp.exe and ftp.exe for transferring to my computer. i
> removeed those two exes from my system, backupped. without
> them i can do everything i want, but i cannot connect well
> to internet, seems logical. sometimes(rare) it works as
> well, and i do not get worms. when i switch the firewall
> on, everything works normal and perfect. my question is how
> i can get safely online with windows xp pro, and no
> firewall with restricted user? i disabled many services,
> and deleted some users from security administrations, i
> have worked in the group policy settings as well. now i
> dont have much more to try. please help! a friend got
> windows 2000 and just restricted anyprogram he doesnt use,
> and it works fine with him. is windows xp just too "open"?
> thanks for any help!
[-]
Putting the words "safely" and "online" in one sentence makes for a nice
joke, really. It simply doesn't matter what system you use -- you aren't
safe while someone or something can talk to your machine and the really
good ones are able to break into and use your machine without leaving a
trace.

Now you can put restrictions on applications with XP, too, still having
a connection to the Internet without, at least, the built in firewall
enabled just isn't a good idea. Simply do a netstat -a to see what's
still listening and you'll see that even disabling various services
isn't the final solution.

To be safe, or as safe as it is possible without too much ado:

You don not need to be Administrator for your daily work, so use a
restricted account.
Enable XP's firewall for all your connections.
Install or let XP install all relevant updates.
Do not use IE for surfing.
Disable Outlook's preview window.
Switch Outlook offline before reading your email.
Use text format for mail and news.
Use your brainware as to install a dialer for instance it does need
someone to agree to the installation.

If you want a more in-depth guide you may download the "Guide to
Securing Microsoft Windows XP" white paper from the NSA's site. Not a
step-by-step guide, but makes for an interesting read.

Cheers,
Juergen



Relevant Pages

  • Re: New XPHome SP2 Install/Security Considerations
    ... > going to purchase and install XPHome with SP2. ... Why are you buying Windows XP SP1 if he has Windows XP? ... Make sure the firewall is ... hook it to the Internet and get the rest of the updates. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unwanted XXX Favorites Added to My List
    ... > every time I go on the internet. ... I will assume a "Windows" operating system is what is ... You should at least turn on the built in firewall. ... Did I mention you have to not only install this software, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SETTING HOMEPAGE
    ... I have installed Norton Internet ... install several of them, update them regularly and scan with them when you ... disable your Windows Messenger service. ... by the normal home user and in cooperation with a good firewall, ...
    (microsoft.public.windowsxp.customize)
  • Re: norton anti-virus
    ... > installed well- no problems using internet explorer. ... Windows Update ... You should at least turn on the built in firewall. ... Did I mention you have to not only install this software, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Does anybody know what virus ive got?
    ... > Internet Security after I install it. ... Microsoft has these suggestions for Protecting your computer from the ... I'll mainly work around Windows XP, as that is what the bulk of this ...
    (microsoft.public.windowsxp.customize)