Tagged Questions
6
votes
2answers
214 views
Can a webcam be turned on when disabled in Windows' device manager?
In addition to whether a webcam can be turned on without the indicator light, I was wondering if disabling the device in Windows' device manager is a good option.
Of course when your system is ...
3
votes
3answers
248 views
How to effectively (and reasonably) secure Windows in corporate environment.
A member on my staff recently had their work computer compromised while on their home network. The following is the information regarding their computer
Windows XP SP3 - fully patched at the time of ...
1
vote
1answer
643 views
How do these Windows services affect the security of Windows Firewall?
Its common to disable unneeded services in Windows 2008 R2, but sometimes I come across installations that use Windows Firewall and related services. More info: see service dependencies for Windows ...
5
votes
2answers
227 views
Advice for writing my first application security review
I wish to write a security review for a specific windows server/client application that runs on a closed LAN or WAN (between 1 and 200+ users across multiple sites); it's not a web-application. The ...
4
votes
1answer
352 views
Security Risk of Disabling forceguest in non-AD Environment
Our application group is looking to deploy a product which requires that we disable forceguest in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa. We are running on a Novell network (I know, I ...
10
votes
3answers
2k views
How can I prevent someone from accessing a Windows XP system via boot disk?
Apparently a computer system protected by a a login password, e.g. Windows XP, can be easily hacked by someone with physical access to it using methods like this one:
...
1
vote
1answer
170 views
Effectiveness of Belarc Advisor
I have seen some people recommend Belarc Advisor for Windows hardening, especially for servers. It's supposed to check for stuff such as installed hotfixes and CIS benchmarks (<-- which are great, ...
0
votes
2answers
3k views
Replacing windows shell for everybody but the system administrator
[cross posted from superuser - I believe the question is also relevant here]
I'm trying to harden a windows 7 machine, including replacing the default login shell from explorer.exe to a custom ...
2
votes
1answer
129 views
Whitelisting applications in Windows7
Windows 7 and Server 2008 R2 come with a security tool called Applocker. This allows admins to restrict applications to a specific white list which can be as granular as the individual application ...
5
votes
1answer
1k views
How do I apply a security baseline to Windows 2008 R2?
I've setup a Windows 2008 R2 server with an Active Directory Domain Services role. I would like to apply the Specialized Security – Limited Functionality (SSLF) security baseline to it, but am unsure ...
13
votes
4answers
1k views
Windows hardening
Can anyone point me at some good resources on Windows hardening? From 2003 upwards.
