Summary

18 IT Essentials: PC Harware and Software Companion GuidePerform Preventive Maintenance on SecuritySeveral maintenance tasks are necessary to ensure that security is effective. The followingsections cover how to maximize protection by performing updates, backups, and reconfigurationof the operating systems, user accounts, and data.After completing the following sections, you will meet these objectives:■■■Describe the configuration of operation system updatesMaintain accountsExplain data backup procedures, access to backups, and secure physical backup mediaDescribe the Configuration of Operating SystemUpdatesAn operating system is a likely target of attack because obtaining control of it can providecontrol of the computer. Then the compromised computer can be seized and put to work bythe criminals. One popular use is to turn targeted computers into spam generators thatlaunch attacking e-mails without the user being able to stop them. A computer compromisedin this way is called a zombie.Windows XP automatically downloads and installs updates to operating systems by default.However, this might not be the best way to update systems. The updates might conflict withthe security policy of an organization or might conflict with other settings on a computer.Furthermore, a network administrator might want to test the updates before the updates aredistributed to all the network computers. The following Windows XP options give users theability to control when software is updated:■■■■Automatic: Downloads and installs updates automatically without user interventionOnly download updates: Downloads the updates automatically, but the user isrequired to install themNotify me: Notifies the user that updates are available and gives the option to downloadand installTurn off automatic updates: Prevents any checking for updatesIf the user is on a dial-up network, the Windows Update setting should be configured tonotify the user of available updates, or it should be turned off. The dialup user might wantto control the update by selecting a time when the update does not interrupt other networkactivity or use the limited resources available.