Questions tagged [windows]

Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

Filter by
Sorted by
Tagged with
17 votes
4 answers

Windows hardening [closed]

Can anyone point me at some good resources on Windows hardening? From 2003 upwards.
user avatar
9 votes
3 answers

How can TOCTTOU vulnerabilities within the Windows OS be mitigated?

What are some ways to mitigate the time-of-check-to-time-of-use issues that apply to Windows permissions? Example: End-user is added to the local Administrators group in order to install software, ...
Iszi's user avatar
  • 27.1k
22 votes
6 answers

How can I enumerate all the saved RSA keys in the Microsoft CSP?

I have an application that is creating several keys and storing them in various stores (in this case the Machine store). How can I enumerate all the keys on a given Windows system? ...
makerofthings7's user avatar
7 votes
1 answer

Windows mandatory access control: How to remove “mandatory level” label from the file?

How to remove "mandatory level" label from the file? I have two files, for the first one icacls returns Mandatory Label\Medium Mandatory Level:(NW) for the second icacls doesn't return ...
Roman Pokrovskij's user avatar
12 votes
3 answers

Prevent acccess to the C drive on Windows systems

Is it possible to prevent regular users from accessing the C drive via Windows Explorer? they should be allowed to execute certain programs. This is to ensure that employees cannot steal or copy out ...
Robin Rodricks's user avatar
11 votes
3 answers

Any good free SSL proxy on windows? [closed]

I'm looking for SSL proxy capable of dumping requests. I want to test custom browser against SSL-MITM attacks. I'm able to re-route all traffic ongoing from browser to machine with proxy. ...
pixel's user avatar
  • 247
1 vote
2 answers

Protecting an IIS web site hosted at home

My case is I just registered at to get a domain for a website I am staging on my home computer (I know it's not considered good to do so). But the website is not big, and I don't expect to ...
Shekhar_Pro's user avatar
9 votes
4 answers

A firewall without any extra features [closed]

I have Kaspersky Internet Security (KIS) installed on my system. I always keep it disabled, yet using a few practices, I kept my system virus free for years: I disabled autorun using these tricks; I ...
Sadeq Dousti's user avatar
  • 1,514
6 votes
3 answers

Are Windows security updates audited?

An IT guy said that in his company, the Windows updates (small security updates that are downloaded automatically by the Windows autoupdate) are checked by the auditor. ie: the auditor checks if every ...
Nav's user avatar
  • 351
5 votes
2 answers

What criteria do you use for evaluating Client-Side / Endpoint security products?

What features are important to you in client-side AV and Firewall products? Who benefits from these features? Managment, the end user, helpdesk. Are there features that are being 'sold' by the ...
makerofthings7's user avatar
12 votes
3 answers

What security requirements do you have for Domain Administrators?

With regard to managing a Windows network, what security polices and processes do you use? For example Do you require/support Smart Card Authentication? Restrict logins from a particular workstation? ...
makerofthings7's user avatar
8 votes
2 answers

What features do you look for in an Enterprise Log Management solution?

This question is for IT Pros, and people who manage a company's infrastructure. Developers should see this related answer for tools geared for them. What are your requirements for such a Event Log ...
makerofthings7's user avatar
6 votes
3 answers

Strategy against browser exploits on Windows?

On a friend's computer is some kind of spam bot installed. It sends messages like Hello: I received my apple iPad 32GB ordered on an online shop ( ) today. So exciting , ...
Philip's user avatar
  • 209
13 votes
2 answers

How is UAC a security improvement?

What does User Account Control on Windows offer in terms of security? It's just an extra click to potentially run a virus.
Moshe's user avatar
  • 1,851
22 votes
1 answer

Is it secure to connect to a remote Windows Server using Remote Desktop only?

I have a Windows Server that I login to from my home. I only use the pre-installed Remote Desktop. Is this a secure way to remote login or should I improve it in some way? If I should improve it, ...
Jonas's user avatar
  • 5,183

41 42 43 44