Tag: msc

Enable detailed logon, logoff and shutdown status messages

December 14, 2007 by Jason

Instead of showing the default logon, logoff and you can enable detailed messages that will tell you exactly what is going on. Wondering what is taking your logon so long? With detailed messages turned on you will see messages like policy and other specific tasks Vista is executing.

To enable detailed on your , follow these steps: Read More»

Windows XP Pro Gobbling Uu Your Bandwidth

June 24, 2007 by Jason

The jury is still out on this for speeding up the Internet connection in XP PRO. I’m making no claims for it but it’s easy to do, and undo so see what you think….

The premise of the tip is that XP Pro (sorry XP Home users it doesn’t work for you…) is configured to reserve 20 percent of your available bandwidth for housekeeping activities, downloading updates and so on. There’s some debate as to whether this is true or not but XP itself claims it to be the case. Read More»

Create an Account Lockout Policy

March 18, 2007 by Jason

In my last article I showed you how you can protect your against anonymous user attacks by turning on logon so you could see when someone attempts to remotely logon to your . Now I am going to help your increase your level of protection with the Lockout Policy.

Creating an Lockout Policy will protect your by limiting the number of time a remote application or attacker can try to your password. This works by automatically locking out your after a designated number of incorrect passwords were entered. Your will remain locked out for a designated period of time before it is automatically unlocked and it can be logged into again. This provides a valuable addition to your security because it can render brute force password attacks useless. If you have your lockout set to 4 bad attempts and the lockout duration to 15 minutes, an attacker can try to your password a maximum of 16 times per hour. Read More»

Turn on auditing to monitor account attacks

March 08, 2007 by Jason

There is no doubt that all of the security features in Vista will help keep your secure. However, these features become less valuable when they are not turned on by default. One feature, known as user , is not turned on by default. With this feature is turned off, anyone with physical access or remote access to through a hole in your firewall (such an opening for Remote Desktop) can use a brute force attack against your user for as long as they want without getting noticed at all. How? The default audit security policy is configured to not log any logon events, successful or failed.

This allows an attacker to try to hack your accounts for as long as it takes to break in. There are a few ways to protect against this that I am going to go over in my next article about the Lockout policy. But first, it is important to turn on this so that you can see who may be trying to break into your accounts. After you have adjusted the security policy, you will be able to see any attacks including the that they tried to logon with and where the request came from. Read More»

Disable User Account Control (UAC) only for Administrators

February 20, 2007 by Jason

I’m sure you are well aware now of the advantages and disadvantages of . It is great for non- users because it protects their from themselves. For advanced users, it can be a much different story causing many annoying authorization pop-ups. This is most common when you are doing a lot of activities that require rights such as installing applications and configuring Vista after a fresh install. There is one practical solution to this issue that will help you with the pop-ups if they annoy you and still benefit from the security of .

This can be achieved by adjusting the local security policy to essentially disable for administrators while leaving it enabled for low rights users. When you are using your PC for normal day-to-day use, log in with your low rights . If you need to install a bunch of applications and make major system configuration changes then log in with your . With fast user switching in Vista you can easily switch between your accounts with little effort. Read More»

User Account Protection for vista

February 13, 2007 by Jason

It can be used to prevent a beginner user from making changes to their by restricting them from accessing or even saving any changes to critical areas. is also helpful against and other malicious software because it will require the user to consent to the action, before any system changes are made.

is a good feature but sometimes it is necessary to it a little so that it is less annoying for more experienced users. For example, an advanced user may be overwhelmed by the number of pop up authorization they receive. By the settings they can reduce the number of those they see as well as completely disable . Although I do not recommend you completely disable , you can fine tune it to be easier to get along with.
Read More»