Tweaking Optimizing Windows.pdf - GEGeek

Downloads:-
http://corporate.windowsupdate.microsoft.com/en/default.asp
www.microsoft.com/windows2000/downloads/
http://support.microsoft.com/highlights/default.asp?pr=topsdn&cl=136&SD=TECH
Also download the Windows Critical Update Notification tool and never miss a Critical Update again. Whenever a new Critical Fix is
released, you will be notified. You can install or uninstall Windows Critical Update Notification by using either of the following
methods: Click Start, point to Settings, and then click Control Panel.
Double-click Add/Remove Programs. Click Microsoft Windows Critical Update Notification. Click Add/Remove.
http://support.microsoft.com/support/kb/articles/Q224/4/20.ASP
Also visit http://windowsupdate.microsoft.com/ and also see other Microsoft links in links further in this document.
As new security fixes become available it is important to apply these new fixes. Microsoft has created the Qchain tool to chain
hotfixes together in order for only one reboot to be required when installing several fixes.
http://support.microsoft.com/support/kb/articles/Q296/8/61.asp
HFNetChk
One particularly important element of operating a secure system is staying up to date on security patches. It's critical to know which
patches have been applied to your system and, more importantly, which haven't. Microsoft has released a tool called HFNetChk that
will significantly aid system administrators in this task. HFNetChk is a command-line tool that enables an administrator to check the
patch status of all the machines in a network from a central location. The tool does this by referring to an XML database that's
constantly updated by Microsoft. HFNetChk can be run on Windows NT 4.0 or Windows 2000 systems, and will scan either the local
system or remote ones for patches www.microsoft.com/technet/treeview/default.asp?url=/technet/security/tools/tools/hfnetchk.asp
Windows NT 4.0, Windows 2000, All system services, including Internet Information Server 4.0 and 5.0, SQL Server 7.0 and 2000
(including Microsoft Data Engine), Internet Explorer 5.01 and later
7. Subscribe
Subscribe to the Security Focus newsletters and check out there website at www.securityfocus.com/
Subscribe to the Security Admin newsletters and check out there website at www.secadministrator.com/
Subscribe to an email alert service that warns you about new, in-the-wild, viruses like the free service at
www.sophos.com/virusinfo/notifications
Subscribe to the Microsoft Security Notification Service. This is a free e-mail notification service that Microsoft uses to send
information to subscribers about the security of Microsoft products. www.microsoft.com/technet/security/bulletin/notify.asp
Also keep an eye on Microsoft's security bulletins at
www.microsoft.com/security
www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/notify.asp
Microsoft Personal Security Advisor
Microsoft Personal Security Advisor (MPSA) is an easy to use web application that will help you secure your Windows NT 4.0 and
Windows 2000 computer system. Simply navigate to the MPSA site and press the Scan Now button to receive a detailed report of
your computer's security settings and recommendations for improvement. MPSA will scan your system and build a customized
report on items such as: missing security patches, weak passwords, Internet Explorer and Outlook Express security settings, and
Office macro protection settings. More details on the specific features performed by MPSA are available by selecting the Features
option on the MPSA toolbar.
For each weakness identified on your computer, MPSA provides easy to understand information on the security issue at hand, how
to fix it, and links to additional information about the issue. Once you correct a reported deficiency, you can run the scan again and
see the results of the change. Running MPSA on a regular basis will help ensure that your system stays up to date and secure.
www.microsoft.com/technet/mpsa/start.asp
8. Disable NetBios, clean up network bindings, protocol optimisation and internet connection sharing
If you are NOT connected to a local or wide area network and only use your dial up modem or cable modem for internet access
then disable NetBios. Goto control panels, Network and examine every line beginning with "TCP/IP", click on properties and then
remove all of the checkmarks from the services listed on the bindings tab!
(Note that when you click "OK" after unbinding everything, Windows will think you're nuts and will warn you that you "have not
selected any drivers to bind with." Just click "NO" to proceed.)
It will quietly disappears from sight and your system's security skyrockets. You won't miss it at all, Windows will boot faster, and
you'll have more memory for things you do need. And if you later decide to share your files with another computer (which is almost
the only reason for Microsoft's networking) it's very easy to bring it back from the grave. Not only does unbinding TCP/IP from the
Microsoft networking components prevent your computer's files from being accessed through abuses of Microsoft's networking.
Unbind ALL network services from EVERY instance of the TCP/IP protocol!
You can also do this by the following registry settings. Copy these next lines into notepad, save as Disable NetBios.reg
(remembering to change save as type to all files), double click the file you have just created and jey presto you are a lot more
secure on the Internet. Remember every time you enter a new dial up networking setting you will need to disable NetBios. The
advantage of doing this is that you will get a better transfer speed and a lot better security. To verify these settings you can go
onto shields up site (https://grc.com) and test before and after putting these settings into your registry.
-----Begin cut & paste here-----
REGEDIT4
[-HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\VNETBIOS]