Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 953

Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

31 votes

Do we really need an antivirus? if yes, what for? And how do they activate and enter in a PC?

Don't update windows (well this is BS) I'm not sure what you're saying "is BS" - that you are more vulnerable to viruses by running an out-dated OS, or that people would even consider not updating … Windows? …
Iszi's user avatar
  • 27.2k
0 votes

How to list missing security updates for Windows servers?

WSUS Offline Update allows you to download Windows Update patches to a USB drive, and install them on another computer that doesn't have an Internet connection. … This will include not only necessary Windows updates, but also updates for many other programs. …
Iszi's user avatar
  • 27.2k
0 votes

What security risks do you face when connecting to a server via RDP?

This is the default configuration for all Windows systems, and usually is not changed except in very security-conscious business environments. …
Iszi's user avatar
  • 27.2k
1 vote

Admin privileges from Random regedit modification

So lets say you can edit/insert one random key inside regedit (can be in any position in the entire tree structure HKLM/HKCU) in order get admin privileges. Any ideas? You don't bother because yo …
Iszi's user avatar
  • 27.2k
1 vote

Why is netapi obsolete

2000 Windows XP Windows Server 2003 Windows Vista Windows Server 2008 (not R2) System Administrator's Perspective: To the people responsible for maintaining information systems, the answer is still … Windows XP Windows Server 2003 Windows Vista Windows Server 2008 Windows 7 Windows Server 2008 R2 ...then MS08-067 is obsolete, and you should make sure that you have patches specified in MS12-054 installed …
Iszi's user avatar
  • 27.2k
58 votes

Can I determine if my computer has a key logger installed?

This would greatly depend on the implementation of the keylogger. Some enterprise-level products do include rootkits which make the keylogger nearly impossible to detect, unless you know the product …
Iszi's user avatar
  • 27.2k
10 votes

Windows hardening

The United States National Institute of Standards and Technology has published configurations for Windows 7 as the United States Government Configuration Baseline, and for XP/Vista as the Federal Desktop …
Iszi's user avatar
  • 27.2k
2 votes

How to enforce TLS on Windows

For Windows operating systems, Microsoft has multiple KB Articles and other references to address SSL/TLS configuration. … There is also a TechNet article, TLS/SSL Settings which is currently scoped to broadly apply for all editions of Windows from Vista to 8.1, and from Server 2008 to Server 2012. …
Iszi's user avatar
  • 27.2k
2 votes

How does Nessus send remote commands on Windows without RDP?

.: \\ComputerName\C$\) WMI PowerShell Remoting Those are just some of the most commonly-used features that might be available remotely from a Windows system. …
Iszi's user avatar
  • 27.2k
15 votes

What is the point of making a complicated PUBLIC password?

Depending on how the virtual machine is configured, the password complexity may be a requirement that's enforced by the system's security settings. On the virtual machine, run secpol.msc. Navigate t …
Iszi's user avatar
  • 27.2k
3 votes

School's computers auto-login and can run .exe's

Any shared-use computer that is not under your control (and even, in certain respects, those which are) should be considered untrustworthy for any purposes beyond those which serve the organization wh …
Iszi's user avatar
  • 27.2k
5 votes
Accepted

If password is changed on Active Directory, can I ensure that PC must be restarted before lo...

I'm not sure your security expectations here are realistic. If someone gets access to your DC in such a way that allows them to change arbitrary account passwords, then you've got plenty of bigger pr …
Iszi's user avatar
  • 27.2k
2 votes

Silent (no user interaction) utility to clear cached credentials on Windows

The short answer is "no". Cached credentials are maintained in special Registry keys. These keys are only accessible by the SYSTEM account. In order to impersonate the SYSTEM account, you must ha …
Iszi's user avatar
  • 27.2k
2 votes

USGCB on a non-networked computer

If you're working as a contractor for the U.S. Government, as is generally implied by your requirement for USGCB compliance, then they will probably require that your system be put into a Security Pla …
Iszi's user avatar
  • 27.2k
4 votes

How secure is Windows 8's Picture Password login?

Taking that out of the equation, it's a little hard to decide which of the non-Windows 8 proprietary passwords would be weakest. … In these scenarios, the Windows 8 picture password and grid-based gesture passwords should not ever be considered. Why? …
Iszi's user avatar
  • 27.2k

15 30 50 per page