Security for Microsoft Windows XP / 2000 Professional Workstations
In accordance with University security policies, all workstations should
have some form of security.
Your computer will fall into one of two categories.
General security - All University workstations fall under
the general security settings. This is a minimum level of security required
regardless of function. You can click the link below to check and fix some
of your basic settings.
General
Settings - Click Here
Level 2 security - This is required for workstations that
store private data and is recommended for all workstations on the University
network. This is a 3 step process. First you will verify your settings,
then change them to recommended settings, then perform final verification.
To be compliant with Level 2 security, the following settings
will be set:
- The password rules for all accounts on the computer
will be changed so that they will need to be long and complex.
- At least 8 characters long.
- Must include at least 1 capital letter, 1 lowercase
letter, 1 number, and 1 special character (symbols on your keyboard
that are not numbers or letters).
- Passwords will expire 360 days after being set.
- Anonymous access will be restricted. This will limit
the information the computer gives out across the network.
- An old and weak method of storing passwords (called
LANMAN hash) will be disabled.
- Settings for account lockout, logs and audit logging
requirements will also be installed.
Click the link below to change your settings according to
University policy.
Level 2 Security
Settings - Click Here
Notes on changing security settings:
- Check with your technical support person or group before
installing any templates. Installation could alter or prevent access to
some systems.
- This template will only run if the user logs-in as the
local administrator on the computer.
- Be ready to enter a new password for the administrator
account after installing the template. Think of a good password that is
not a dictionary word and follows the above complexity rules. See Security
password tips for more information. A password change for all other users
will be required after the installation of the template. All users will
be prompted to change their password the next time they log-in.
- A reboot of the computer may be required to complete
the installation on Windows 2000.
