Page 4 of 13
Windows XP
Securing Windows XP Vol. 1 - Version 2

Basic Steps to Installing XP Safely con't

System Restore

Windows XP has a feature called System Restore that backs up most of the system files. While this feature is far from perfect it can be effective in many situations. System Restore points are (usually) made automatically made "at the time of significant system events" such as when you install a new program or driver. You can also manually create a Restore Point. System Restore is not a true "uninstall" feature or backup. It only monitors and restores key parts of files and the system registry. It can however get you out a jam quickly.

To manually create/restore a restore point:

Use a password for your account

Unfortunately XP allows you to not have passwords for your user accounts. Not having a password is a very quick way to get hacked. Ensure that all accounts have a password. Passwords should be a mix of letters (upper and lower case), numbers, and symbols. Valid symbols include: (` ~ ! @ # $ % ^ & * ( ) _ + - = { } | [ ] \ : " ; ' < > ? , . /). Passwords should not be dictionary words or proper names. Crackers run programs containing these and it won't take long for them to crack it. Make it hard to guess but easy for you to remember. The longer it is the harder it is to crack.

An example of a password strategy would be a phrase:   In 84 i Graduated ! And 8 Years Later i Was Married :-(

Using the above strategy we get I84iG!A*YLiWM:-( . Not only is that extremely difficult to crack, with all the unprotected computers out there it isn't worth the attempt for most crackers. This may sound difficult to do and remember but it isn't. After typing it a few times it will be as easy to remember as your telephone number. Still, it is a good idea to back up your password.

Backup your user password (requires a floppy drive)

Go to Start > Settings > Control Panel > User Accounts > click on the name of the account whose password you wish to backup > in the next window, in the upper left of the screen click on "Prevent forgotten password", the Forgotten Password Wizard will launch. Simply follow the steps in this wizard. If you forget your password at startup XP will ask if you want to use this disk. ***Important -This disk contains the key to unlock your entire system. Lock it away in a safe location. Preferably in a room other than the one that computer is in.

Rename the Administrator account and disable the Guest account (Windows XP Professional only)

Crackers need both a password and a user name to get into your computer. Windows XP Pro comes with a default account called Administrator that has full privileges on your system and Guest that has limited privileges on your system. This gives crackers half of what they need to get into your computer.