Microsoft Windows XP Home Edition - Zenk - Security - Repository

Configuration
Microsoft Windows XP Home Edition
Security Implementation
Version 1.4b Option 1
You have the option to change the default settings for each zone. Below are the
settings and a brief description of the settings. The Local Intranet is defaulted to
Medium-Low security, Trusted Sites are at a Low security setting, Restricted
Sites are at a High security setting, and the Internet is at a Medium setting.
Once you have selected the zone you want to change the settings on click on
Custom Level to configure the settings yourself.
Active X Settings
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
Download signed Active X Controls
This option allows your computer to download controls that can be
assumed to be authentic and unaltered. If option only downloads
without a prompt from you trusted sites by default. You want to
consider changing this option to Prompt because you can not
guarantee a signature from anyone.
Download unsigned Active X Controls
This option allows your computer to block unsigned Active X
controls without a prompt. All zones are set to Prompt for this type
of request by default. This option is at a good level and you should
not need to modify it.
Initialize and Script Active X Controls not marks as safe
This option determines whether to allow initialization and / or
scripting of Active X Controls that do not have the appropriate "safe
for" signature. The default selection for this option is suitable for
home use.
Run Active X Controls and Plug-ins
This option allows the running of downloaded Active X controls and
Plug-ins. The default setting in all the sites except Restricted is to
do this without a prompt. For Restricted sites you want to make
sure that it is set to Disable.
© SANS Institute 2003, Author retains full rights
Script Active X Controls marked safe for scripting
This option determines whether controls loaded with the
tag are allowed to interact with scripts. This option is enabled in all
zones except Restricted.
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
Page 38 of 53
© SANS Institute 2003, As part of the Information Security Reading Room. Author retains full rights.