What are the main things to do to secure a Win NT/2000/XP system?
The following lists items that make WinNT more secure, including detection as well as prevention. These are roughly listed in order of importance. • Install the latest service packs and “hot fixes”. • Use NTFS instead of FAT. NTFS allows permissions to be set on a per-file/per-directory basis and allows auditing on a per-file/per-directory basis. • Rename the “administrator” account. A common attack is to use a Dictionary or brute force attack on the “administrator” account. • Create a new account named “administrator” for detecting intrusion attempts. • Disable the “guest” account. You may also want to rename this account as (much like “administrator”). Once you’ve renamed the “guest” account, you may want to create a new account named “guest” for detecting hacking attempts. • Turn on auditing for “HKEY_LOCAL_MACHINE\Security” in order to detect remote registry browsing. • Enable “Password Protected” on the screensaver. • Turn off automatic sharing of ADMIN$, C$, D$, etc. via the “Aut
