IT Baseline Protection Manual - The Information Warfare Site

Networked Systems IT-Security Management
_________________________________________________________________________________________
5.6 PC with Windows 95
Description
A typical PC with the operating system Windows 95 is
considered. This PC should not be networked. The PC has a
floppy disk drive, a removable or hard disk, a CD-ROM and
possibly a mouse. If available, a printer is to be directly
connected to the PC. The basis for further considerations is
that multiple users will be using this PC.
The following fundamental considerations should also be
taken into account:
Essential security properties of Windows 95 can be put into effect only in a server-supported network.
If a non-networked Windows 95 computer is operated locally, multi-user operation should be avoided
as long as important functions such as control of rights or protocols can still be carried out without the
aid of PC security products. The same considerations must be taken even with a single user if this user
is to be restricted by an administrator via the system guidelines, as this would actually result in multiuser
operation.
Conclusion: A non-networked Windows 95 computer should only have one user who should not be
restricted. Restriction of a user is only wise if this eases navigation of the system or if faulty operation
can thereby be ruled out. If multi-user operation must nonetheless be implemented, then, for reasons
of security, this is only wise in combination with a PC security product.
Threat Scenario
For IT-baseline protection of a PC with Windows 95, the following typical threats will be considered:
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000
Windows
95