Skip to main content

Securing XP

1. NTFS Partition.
2. Disable Error Reporting
3. Disable Automatic Updates (only if your XP copy is pirated)
4. Disable "Recent Documents" Viewed
5. Setup XP Firewall
6. Setup screensaver password
7. Setup BIOS password
8. Setup "AfterBios" login password
9. Account Modifications
-Rename Admin Account
-Disable Guest Account
-Disable Help_Assistant Account
-Disable Support Account
10. Install a virus scanner.
11. Change Login Screen (default shows usernames)
12. Disable Remote Registry (and other services)
13. Disable/Change Auto-Search settings in IE.

1. NTFS Partition.
Be sure to install XP onto an NTFS partition so that you (the admin) can take advantage
of file permissions. You want this option so that "you" can decide who reads, writes,
executes what files.

If you didnt install XP onto an NTFS partition. Convert It. To convert to NTFS follow
the instructions below.

Open a command prompt and type "convert c: /FT:NTFS /v"
This command will convert your c: partition from FAT to NTFS in verbose mode.

2. Disable Error Reporting.
we dont want microsoft to know everytime we fuck up. especially if we didnt pay for winxp.

control panel > performance and maintenance > system > advanced > error reporting (disable all) right click "my computer" > manage > services and applications > services > " stop and disable" Error Reporting.

3. Disable automatic updates.
To update, they must know what we have. thats a NO NO!

NOTE: DO THIS ONLY IF YOUR COPY OF XP IS PIRATED!! I suggest "auto update" if your copy of XP is legal. If your copy is pirated then i suggest that you stay updated with the latest fixes and patches manually.

control panel > performance and maintenance > system > automatic updates (disable updates)

right click "my computer" > manage > services and applications > services > " stop and disable" Automatic Updates.

4. Disable "Recent Documents" Viewed.
Quit listing most recent documents opened under the start button.

control panel > appearance and themes > task bar and start menu > start menu >
customize > advanced

remove the checkmark next to "List my most recently opened documents".

5. Setup XP Firewall.
Before this change, i scanned my xp box and found it to have many ports wide open. After this change, I found nothing and xp logged the attempts in c:\windows\pfirewall.log.

control panel > network connections > right click "local area connection" > properties
> advanced > check the box under "Internet Connection Firewall" then choose "settings".

Services Tab - leave all unchecked unless there is a service you are running that people
must be able to access.

Logging Options - Log everything.

ICMP - I left all these unchecked for the time being. (allowing nothing)

(this does not protect you from "Spy Ware". This only stops traffic from coming into
your win-xp box (not all traffic). It does not stop traffic from going out.) If you
need to stop traffic from going out and need a more secure firewall then download a real
firewall like "zone alarm or black ice".

6. Setup screensaver password.
Setting a screensaver password incase you leave some of that secret pr0n open when you walk away.

right click on the desktop > properties > screen saver > check the box next to " On
Resume, Password Protect."

If you dont have a password set on your user account, you can do so in control panel >
user accounts > change account.

7. Setting a BIOS password.
We dont want anyone rebooting the computer or trying to sneak into our pr0n while we are away at school or work.

I cant explain to one how this is done due to the differences between all computers and
how the BIOS settings are entered. If you know what Im talking about then do it. If you
dont know what Im talking bout then learn how to do it. A screensaver password is useless
unless you setup a BIOS password.

8. Setting up the "AfterBios" password.
Sometimes bios passwords are easily cracked. This password will add extra local login security incase your bios pass is crax0red. I dont know bout you but i love having to type in 3 passwds and a username to login to my box.

Start > run > type "syskey" > choose "update" > choose "Password Startup" > enter a
password and choose ok.
9. Renaming and Disabling Accounts for adminstrator, guest, help_assistant and support.
Right click my_computer > manage > local users and groups
rename administrator account
disable guest account
disable help_assistant account
disable support account

10. Install Virus Protection.
Install a virus scanner. Your firewall might protect your system from unwanted hackers but
what about an unwanted virus or trojan?. I recommend installing a virus scanner such as
"Nortons" or "McAfee".

11. Change Default Login Screen.
Xp uses the "welcome screen" by default. This screen has the names of all accounts on the
system so that the user only has to click on their name and type a password. Come on now....
We arent that damn lazy. If we change this screen to the normal login, then prying eyes
will have to know a username and password to get in. Follow the instruction below to change
this.

control panel > user accounts > change the way users log on or off

uncheck the box next to "Use Welcome Screen" and choose "apply options".

12. Disable Remote Registry.
right click "my computer" > manage > services and applications > services > " stop and disable" Remote Registry.

NOTE: disable any services running in this area that you arent using.

13. Disable/Change Auto-search in Internet Explorer.
This is not really a security risk but it is important to some people that prefer to keep their internet surfing to themselves and away from microsoft.

Open Internet Explorer > Click the "search" button > click the "customize" button > click
"autosearch settings" > FOLLOW INSTRUCTIONS BELOW...

DISABLE: In the "When Searching" drop down menu, select "Do not search from the address bar". > click "ok" > "ok". Type an invalid address in your address bar and see if it
takes you to the msn search page or if it gives a "page not found" error. In this
case, the "page not found" error is what we want.

CHANGE: If you wish not to disable, but you wish to change it to your favorite "google.com"
search page. Instead of following the "DISABLE" instructions, follow the instructions
below. Choose "Google Sites (or whatever you prefer)" from the "choose a search provider
to search from address bar" drop down menu > click "ok" > "ok"
Labels:

Comments

Post a Comment

Popular posts from this blog

10 Great NotePad Tricks To Scare Your Friends

Most of you must be aware about a tool called notepad. It is a simple text based editor. But today I am going to discuss some cool tricks which you can perform on your computer using notepad. You can also use these tricks to scare your friends. 1.Cycle a message in your friend’s computer. Type : @ECHO off :Begin msg * Hi msg * Are you having fun? msg * I am! msg * Lets have fun together! msg * Because you have been o-w-n-e-d GOTO BEGIN Save it and... as pc.bat and send it to your friends. 2.Make Keyboard Keys Type Continuously: Type : MsgBox “stop me..! if you can” Set wshShell =wscript.CreateObject(“WScript.Shell”) do wscript.sleep 100 wshshell.sendkeys “{bs}” loop Save it as pc.vbs and send it to your friends. 3.Convey your friend a message and shut down his/ her computer. Type : @echo off msg * I don’t like you shutdown -c “Hahahah You are Doomed” -s Save it as pc.bat and send it to your friends. 4.Toggle your friend’s Caps Lock button simultaneously Type : Set wshShell =wscri...
3 comments
Read more

How to use pen drive as RAM

Yes with some modified settings you can use your pen drive as a RAM 1) Connect your pen drive to your PC [pen drive should be at least 1 GB or if you having 4 GB then its better] 2) Allow PC what he is supposed to do,let system to detect pen drive. 3) After your PC finished with its detection work,you have to do some little 4) Right click on the My Computer and select the properties 5) Goto advanced and then performance setting then advanced then 6) Select pen drive and click on custom size " Check the value of space available " 7) Enter the same in the Initial and the Max columns " You just used the memory of the PenDrive as a Virtual Memory " 8) Now restart your pc and enjoy your fast and super system
4 comments
Read more

Changing a users icon on the Welcome screen

Each user that is set up on your computer can associate an image that appears next to his or her name on the Welcome screen. By default, Windows will randomly select an image for you, but this selection can easily be changed. If you do not like the images that Windows has to offer, you can select any other image. The process of changing a user's image is very simple. Just perform the following steps and you will have it changed in no time: 1. Open up the user manager by clicking the Start menu and selecting Run. Then type in nusrmgr.cpland click OK.This is a shortcut to User Accounts that will save you time going to Control Panel and then clicking the User Accounts icon. 2. This will start up the New User Accounts Manager. To change a user's picture, just click the user name. 3. Then, click Change My Picture text and you will see a screen with all of the different images that are built into Windows XP. 4. If you see one you like, just select it by clicking it and then cl...
1 comment
Read more