You can lock any system down with the proper knowledge of it.

Simpley break windows services you dont need and setup your HD security in a way that the everyone group is not allowed to access it. You should always specify who has access. Never go with what microsoft gives you as default. System, does not need access to everything on your HD.

I break everything in the system I find flaws with. You can set policies and security templates assinging user an system rights to: registy path, services, hd folders and so on. As for user folders, it is smart to have a backup.

I recommend windows 2000 with all its needed updates, a good firewall in your router, a good software firewall and a good updated virus scanner. If you do not know how to look through your own registy, I suggest you let spybot: search and destroy do it for you. Keep it updated. If your worried about IE holes download mozilla. All of these can be tweeked to give you the best secure system. Then go by ghost and image your system and burn it to cdr or dvdr. Quick fix if you get taken down. There is nothing you cant block, remember you do not have to be online all the time. Its important to choose that time. two simple batch files: on and off, ipconfig/renew and /release.

if they can make it you can always break it.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/289/30147#30147