Computing Homepage
 

Computing HelpDesk Hours:

Phone: 540-568-3555
Mon-Thu: 8:00am - 9:00pm
Friday: 8:00am - 5:00pm
Saturday: Closed
Sunday: 3:00pm - 9:00pm
(during class session)

Exceptions:

November 23-24, 2009:
Open 8am-5pm

November 25, 2009:
Open 8am-Noon

November 26-27:
Closed



 

StartSafe Information for New Student Computers

last updated: Friday May 16, 2008 01:04 PM

If you must store sensitive data associated with JMU business or constituents on a laptop or other portable device, contact JMU Security Engineering at it-security@jmu.edu for assistance.

 

Most of these instructions apply to Windows computers. For others:

 

For Windows computers:

 

STEP 1 - Download and Install All Critical Updates from the Microsoft Windows Update Web Site

This step will fix the defects in Windows software that let criminals take control of our computers (and our privacy, our identity, our network, etc.). This step can be time consuming because there are so many security updates to install, particularly for older computers. A later StartSafe step will have you configure your computer so it keeps itself up to date so you don't have to do this again.

You must repeat the process until you're told that no more critical updates are available. Doing it once may leave you vulnerable.

To update your Windows Vista computer:

  • Open Internet Explorer ( other browsers won't work )
  • In the menu bar, click Tools and then select Windows Update
  • In the Control Panel window that pops up, click Get updates for more products. This will start the installation of the Microsoft Update program which will better keep your computer up to date than the older Windows Update program.
    • Accept the terms of use.
    • Click install.
  • When the Control Panel window reappears, click Check for Updates and follow the remaining directions. You'll need to repeat this process until there are no more critical and security updates available.

To update your Windows 2000, XP, or 2003 computer:

  • Open Internet Explorer ( other browsers won't work )
  • In the menu bar, click Tools and then select Windows Update.
  • If you see "NEW! Get Microsoft Update Today", then
    • Follow the instructions to install the new Microsoft Update program which will better keep your computer up to date than the older Windows Update program. Then come back here.
  • Otherwise,
    • Follow the instructions to update your computer. You'll need to repeat this process until there are no more critical and security updates available.
  • If you need them, instructions showing screen shots are available here but may vary somewhat from what you actually see depending on versions and platform.

Older Microsoft Windows operating systems ( 95, 98, ME, NT ) are no longer supported, are not provided with security updates, and cannot be secured so they should not be used, particularly on a network.

 

 

STEP 2 - Download and Install All Critical Updates from the Microsoft Office Update Web Site

This step will fix the defects in Microsoft Office software that lets criminals take control of your computer (and your privacy, your identity, our network, etc.).

  • The original installation media will probably be required.
  • You must return to the Microsoft Office Update Site repeatedly until it tells you no more security updates are available. Going there just once may leave you vulnerable. Go back until you're told no more critical updates are available.
  • If you are using Office 2000, you will need to revist this site once a month to get the latest updates. Newer versions of Office will update themselves automatically after you complete the next step.

 

STEP 3 - Set up your computer to automatically download future updates

Once you are caught up with current critical Windows updates, you'll need to install the new ones that come out about monthly. You can do this manually ( not recommended ), or, if you have a Windows 2000, XP, or 2003 computer, you can set it up so that it takes care of itself ( recommended ). Your computer will check for updates, download them, install them at a time specified by you, and reboot all on its own.  If your computer is turned off at your selected installation time, it will perform the installation the next time it is powered on.

To set up the automatic updates, follow the instructions at Microsoft's Automatic Update Site.

Note - The Microsoft  update service does not support Office 2000 ( including Outlook ) products. If you are using Office 2000, you will need to visit the Microsoft Office Update web site once a month. If you are using Office 2002, XP, or 2003, it will be updated automatically along with everything else.

 

STEP 4 - Install Anti-Virus Software Provided by JMU

Anti-virus software must be installed to protect you from criminally written programs that you may inadvertently run on your computer or that criminals may force on your computer by using unknown defects. JMU has purchased a site license for Symantec Corporate Edition anit-virus software that allows all faculty, staff, and students to use it both at the office and at home. The advantage of using this software is that it is provided pre-configured to offer the best security and is fully supported by the JMU Helpdesk. TO PREVENT PROBLEMS, ALL OTHER ANTIVIRUS SOFTWARE SHOULD BE UNINSTALLED FROM YOUR COMPUTER before installing Symantec.

The Symantec anti-virus software can be downloaded from the JMU Computing Downloads web page.

Having anti-virus software does not protect you from new viruses that are released daily. A clean virus scan of a program does not mean its safe to run.

You cannot legally install or distribute the JMU licensed Symantec anti-virus software on computers owned by people who are not current students or employees of JMU. You can, however, get free anti-virus software elsewhere. Here are three review articles on free anti-virus software products:

http://www.pcmag.com/article2/0,1895,1864601,00.asp
http://www.pcworld.com/reviews/article/0,aid,124475,00.asp
http://antivirus.about.com/od/antivirussoftwarereviews/a/freeav.htm?rd=1

 

STEP 5 - Configure your computer to display file names correctly

Windows hides the real names of files from you which makes it easy for virus writers to fool you. It also makes it difficult to do something which should be simple - change a file name. You can tell your computer to tell you the truth about most file names by making the simple change below.

On Windows Vista computers:

  • Click Start
  • Select Computer
  • Select Organize
  • Select Folder and Search Options
  • Click the View tab
  • Scroll down to the line "Hide file Extensions for known file types" and uncheck the box next to it.
  • Click OK

On Windows XP, 2000, and 2003 computers:

  • Double-click My Computer
  • Click the Tools Menu item and then select Folder Options
  • Click the View tab
  • Scroll down to the line "Hide file Extensions for known file types" and uncheck the box next to it.
  • Click OK

 

 

Step 6 - Install  security updates for other software you may have installed ( e.g. iTunes, Winamp, Firefox, QuickTime, RealPlayer, Skype, Flash, Adobe Acrobat Reader )

People often add programs to their Windows computer. Many of these programs have security defects that can allow criminals and viruses to take control of the computer. Check the list of critical security updates for software that you may have installed on your computer. You only need to update these programs if they have been installed on your computer. A list of programs installed on a Windows computer can be found in the 'Add or Remove Programs' Control Panel.

Download locations for programs commonly installed that have serious and/or actively exploited security defects are listed below:

 

Step 7 - Password protect your screen saver

Set your screen saver up so that you're required to type your password before it will unlock. On Windows XP:

  • right-click any blank portion of the screen and select properties
  • click the Screen Saver tab
  • Click the On resume, password protect checkbox

 

Step 8 ( optional but STRONGLY recommended )  - Set up and use a safer account for day to day use

Safer accounts for day to day use on Windows XP and Vista computers can be set up fairly simply. If you want to take one more step that will reduce risk more effectively than many of the other recommendations, set up a limited account on your Windows XP computer for day to day use ( procedure for Windows Vista is similar except that the account is called 'standard' instead of 'limited' ).

Most of today's viruses and spyware will not install when using such an account. If they do install, their damage will be limited.

If you don't use such an account, the chances are high your computer will be infected with Spyware and other unwanted programs, particularly if you use Internet Explorer as your browser.

 

 

Step 9 - Review Information on Safe Operating Practices and Current Threats and Issues

Once you have set up your computer in a way that will protect it and you, it is important to realize that your operating habits can reverse all the work you've done and allow criminals or viruses to take control of your computer or information. Please review the JMU Computing Security web page for guidelines on operating it in a safe manner, common mistakes, and current threats and issues. If you handle constituent, partner, financial, or other sensitive information, please review the Protecting Sensitive Information material. If you must store sensitive data associated with JMU business or constituents on a laptop or other portable device, contact JMU Security Engineering at it-security@jmu.edu for assistance.

 

Addendum:

  • File/Music Sharing Programs
  • USB Portable Storage Devices

 

File/Music Sharing Programs

If not configured, maintained, and operated properly, file sharing programs may be the cause of numerous problems:

 

  • They may share sensitive information stored on your computer with the whole world
  • They may share copyrighted information stored on your computer exposing you to serious fines, legal problems, and/or action by JMU offices such as Judicial Affairs, Human Resources, and JMU IT.
  • Security defects in the software may allow others to take control of your computer
  • They may expose you to malicious files

The University of Chicago has published a comprehensive web providing instructions to prevent popular file sharing programs from publishing to the Internet. It is strongly recommended that you use the instructions to disable publishing.

 

USB Portable Storage Devices

There are large numbers of malicious programs circulating that will infect such devices or allow such devices to infect computers to which they are connected. USB devices include USB keys, USB disk drives, cameras, and digital picture frames. Risk reduction measures:

  • Do not plug or allow others to plug unknown or untrusted USB devices of any type into your computer, particularly if the computer processes or stores sensitive data. On Windows computers, hold the shift key down while inserting the device and continue holding it down until windows tells you the device is ready. This will disable any autorun functionality. You may need to double click the folder to view the contents and, if trusted, open individual files.
  • Use caution when plugging your USB device into an unknown or untrusted computer. If the device has a write protect switch, use it. If the device contains sensitive data, do not plug it into unknown or untrusted computers at all.