Safeguard Your Business
It's an easy way to help protect against viruses and other risks
It's a major commitment to properly safeguard your business from external threats. If you've started down that path by updating your software and virus protection and installing a firewall, you've already made a significant investment of time, effort and money.
Unfortunately, the lack of stringent administration procedures can unwittingly sabotage that security investment — reversing the changes you've made or inadvertently introducing new risks.
Basic Steps You Can Take
To ensure you get the full benefit of the safeguards you've put in place, you may need to get proactive about "locking down" your client PCs. That way users can't intentionally or unintentionally override the security measures you've implemented. Use the information below that best fits your organization's needs:
Practice least privilege
With Windows XP and Windows Server, it's possible to give users different permission levels based on the role they play in your organization. Many small businesses tend to give all users "Administrator" access on their PC so they can easily install new software or make other changes. But by doing so, they make it easier for viruses to infect the machine or for users to install software that violates company software policy or protocols. You may want to consider:
- Removing "Administrator" privileges for most users and relying on the built-in "User" level privileges
- Activate Windows XP's account lockout feature that will disable an account after an administrator-specified number of logon failures
- Use software restriction policy to prevent unwanted programs from running; this includes viruses and Trojan horses, or other software that is known to cause conflicts when installed
- Having users request assistance from someone with appropriate permissions when they need to do something that requires more authority
Use servers to manage clients
With Windows Servers it's possible to centrally control client PCs, thereby giving an individual user access to specific programs only. That way they can't make changes, install new software or manipulate passwords.
Mionos System Consultants have in-depth knowledge on Microsoft Windows security features, from locking down client desktop to establishing group policies that is suitable for your business. We are experienced professionals trusted by many companies to audit and maintain their IT environments.
Contact us today for more information.
Top