Following is a list of “best
practices” for Windows users. We recommend WindowsXP for all remote Windows
users.
The RUNSAFE site (http://www.jmu.edu/computing/runsafe)
provides additional detail and instructions to help make your computing
experience as safe as possible.
Use the NTFS File System
Keep your operating system patched
Apply security patches for other software such as Office, instant messaging software, etc.
Run the JMU-provided Symantec AntiVirus software that auto-updates itself, is supported, and is provided for free
Require a password to use the computer; set password policies and enable account lockout
Do not share passwords between accounts or people
Disable password caching
Disable remote login to administrator account
Disable any unnecessary accounts on the computer (e.g. Guest)
Create strong passwords for all local and remote accounts including shares (especially accounts with administrator-level privilege)
Use a firewall (either hardware or software)
Configure Windows to show full file names with extensions
Set up Internet Explorer so trusted sites are in the trusted zone and set the security level for the Internet zone to high
Setup and use a non-privileged account on the computer for general work
Disable file and printer sharing
Turn on auditing and increase security event log size
Keep important files backed up
Ensure you are complying with the Data Stewardship Policy for any JMU data
you access (http://www.jmu.edu/JMUpolicy/1205.shtml)
Keep computer turned off when not in use
Be cautions about entertainment and shared use. Children and other users should have restricted accounts. Entertainment and non-business use should be minimized (music, streaming media, games, etc.) This is particularly important if you access sensitive information (e.g. elevated privilege accounts, confidential student/employee information, critical processes like payroll)
Under no circumstances should remote access to sensitive accounts be performed from computers whose security, maintenance, or installed software is unknown (kiosks, labs, internet cafes, hotel computers, neighbors, etc.)
Downloaded software, utilities, enhancements, patches, etc. should only be
installed from trusted vendor and distribution sites