|
StartSafe Information for New Student Computers
last updated:
Friday May 16, 2008 01:04 PM
If you must store sensitive data associated with JMU
business or constituents on a laptop or other portable device, contact JMU Security Engineering
at it-security@jmu.edu
for assistance.
Most of these instructions apply to Windows computers. For others:
- MacIntosh OS-X
- Linux/Unix
For Windows computers:
STEP 1 - Download and Install All Critical Updates from the Microsoft Windows
Update Web Site
This step will fix the defects in Windows software that let criminals take
control of our computers (and our privacy, our identity, our network, etc.).
This step can be time consuming because there are so many security updates to
install, particularly for older computers. A later StartSafe step will have you
configure your computer so it keeps itself up to date so you don't have to do
this again.
You must repeat the process until you're told that no more critical updates
are available. Doing it once may leave you vulnerable.
To update your Windows Vista computer:
- Open Internet Explorer ( other browsers won't work )
- In the menu bar, click Tools and then select Windows Update
- In the Control Panel window that pops up, click Get updates for more
products. This will start the installation of the Microsoft Update program
which will better keep your computer up to date than the older Windows Update
program.
- Accept the terms of use.
- Click install.
- When the Control Panel window reappears, click Check for Updates and
follow the remaining directions. You'll need to repeat this process until
there are no more critical and security updates available.
To update your Windows 2000, XP, or 2003 computer:
- Open Internet Explorer ( other browsers won't work )
- In the menu bar, click Tools and then select Windows Update.
- If you see "NEW! Get Microsoft Update Today", then
- Follow the instructions to install the new Microsoft Update program which
will better keep your computer up to date than the older Windows Update
program. Then come back here.
- Otherwise,
- Follow the instructions to update your computer. You'll need to repeat
this process until there are no more critical and security updates available.
- If you need them, instructions showing screen shots are available
here but may vary somewhat from what you
actually see depending on versions and platform.
Older Microsoft Windows operating systems ( 95, 98, ME, NT ) are no longer
supported, are not provided with security updates, and cannot be secured so they
should not be used, particularly on a network.
STEP 2 - Download and Install All Critical Updates from the Microsoft Office
Update Web Site
This step will fix the defects in Microsoft Office software that lets criminals
take control of your computer (and your privacy, your identity, our network,
etc.).
- The original installation media will probably be required.
- You must return to the
Microsoft
Office Update
Site repeatedly until it tells you no more security updates are available.
Going there just once may leave you vulnerable. Go back until you're told no
more critical updates are available.
- If you are using Office 2000, you will need to revist this site once a month
to get the latest updates. Newer versions of Office will update themselves
automatically after you complete the next step.
STEP 3 - Set up your computer to automatically download future updates
Once you are caught up with current critical Windows updates, you'll need to
install the new ones that come out about monthly. You can do this manually ( not
recommended ), or, if you
have a Windows 2000, XP, or 2003 computer, you can set it up so that it takes
care of itself ( recommended ). Your computer will check
for updates, download them, install them at a time specified by you, and reboot
all on its own. If
your computer is turned off at your selected installation time, it will perform
the installation the next time it is powered on.
To set up the automatic updates, follow the instructions at
Microsoft's Automatic Update Site.
Note - The Microsoft update service does not support Office 2000 (
including Outlook ) products. If you are using Office 2000, you will need to
visit the
Microsoft Office Update web site once a month. If you are using Office 2002,
XP, or 2003, it will be updated automatically along with everything else.
STEP 4 - Install Anti-Virus Software Provided by JMU
Anti-virus software must be installed to protect you from criminally written
programs that you may inadvertently run on your computer or that criminals may
force on your computer by using unknown defects. JMU has purchased a site license for
Symantec Corporate Edition anit-virus software that allows all faculty, staff, and students to use
it both at the office and at home. The advantage of using this
software is that it is provided pre-configured to offer the best security and is
fully supported by the JMU Helpdesk. TO PREVENT PROBLEMS, ALL OTHER ANTIVIRUS
SOFTWARE SHOULD BE UNINSTALLED FROM YOUR COMPUTER before installing Symantec.
The Symantec anti-virus software can be downloaded from the
JMU
Computing Downloads web page.
Having anti-virus software does not protect you from new viruses that are
released daily. A clean virus scan of a program does not mean its safe to run.
You cannot legally install or distribute the JMU licensed Symantec anti-virus software on
computers owned by people who are not current students or employees of JMU. You
can, however, get free anti-virus software elsewhere. Here are three review
articles on free anti-virus software products:
http://www.pcmag.com/article2/0,1895,1864601,00.asp
http://www.pcworld.com/reviews/article/0,aid,124475,00.asp
http://antivirus.about.com/od/antivirussoftwarereviews/a/freeav.htm?rd=1
STEP 5 - Configure your computer to display file names
correctly
Windows hides the real names of files from you which makes it easy for virus
writers to fool you. It also makes it difficult to do something which should be
simple - change a file name. You can tell your computer to tell you the truth
about most file names by making the simple change below. On Windows
Vista computers:
- Click Start
- Select Computer
- Select Organize
- Select Folder and Search Options
- Click the View tab
- Scroll down to the line "Hide file Extensions for known file types" and
uncheck the box next to it.
- Click OK
On Windows XP, 2000, and 2003 computers:
- Double-click My Computer
- Click the Tools Menu item and then select Folder Options
- Click the View tab
- Scroll down to the line "Hide file Extensions for known file types" and
uncheck the box next to it.
- Click OK
Step 6 - Install security updates for other software you may have
installed ( e.g. iTunes, Winamp, Firefox, QuickTime, RealPlayer, Skype, Flash,
Adobe Acrobat Reader )
People often add programs to their Windows computer. Many of these programs
have security defects that
can allow criminals and viruses to take control of the computer. Check the list of
critical security updates for software
that you may have installed on your computer. You only need to update these
programs if they have been installed on your computer. A list of programs
installed on a Windows computer can be found in the 'Add or Remove Programs'
Control Panel. Download locations for programs commonly installed that have
serious and/or actively exploited security defects are listed below:
Step 7 - Password protect your screen saver
Set your screen saver up so that you're required to type your password before
it will unlock. On Windows XP:
- right-click any blank portion of the screen and select properties
- click the Screen Saver tab
- Click the On resume, password protect checkbox
Step 8 ( optional but STRONGLY recommended ) -
Set up and use a safer account for day to day use
Safer accounts for day to day use on Windows XP and Vista computers can be set up fairly simply. If you want to take one more step that will reduce risk more effectively
than many of the other recommendations,
set up
a limited account on your Windows XP computer for day to day use (
procedure for Windows Vista is similar except that the account is called
'standard' instead of 'limited' ). Most of
today's viruses and spyware will not install when using such an account. If
they do install, their damage will be limited. If you don't use such an
account, the chances are high your computer will be infected with
Spyware and other unwanted programs, particularly if you use Internet Explorer
as your browser.
Step 9 - Review Information on Safe Operating
Practices and Current Threats and Issues
Once you have set up your computer in a way that will protect it and you, it is
important to realize that your operating habits can reverse all the work you've
done and allow criminals or viruses to take control of your computer or
information. Please review the
JMU Computing Security web page for
guidelines on operating it in a safe manner, common mistakes, and current
threats and issues. If you handle constituent, partner, financial, or other sensitive
information, please review the
Protecting Sensitive
Information material. If you must store
sensitive data associated with JMU business or constituents on a laptop or other portable
device, contact JMU Security Engineering at
it-security@jmu.edu for assistance.
Addendum:
- File/Music Sharing Programs
- USB Portable Storage Devices
File/Music Sharing Programs
If not configured, maintained, and operated properly, file sharing programs
may be the cause of numerous problems:
- They may share sensitive information stored on your computer with the
whole world
- They may share copyrighted information stored on your computer exposing
you to serious fines, legal problems, and/or action by JMU offices such as
Judicial Affairs, Human Resources, and JMU IT.
- Security defects in the software may allow others to take control of your
computer
- They may expose you to malicious files
The University of Chicago has published a
comprehensive web
providing instructions to prevent popular file sharing programs from publishing
to the Internet. It is strongly recommended that you use the instructions to
disable publishing.
USB Portable Storage Devices
There are large numbers of malicious programs circulating that will infect
such devices or allow such devices to infect computers to which they are
connected. USB devices include USB keys, USB disk drives, cameras, and digital
picture frames. Risk reduction measures:
- Do not plug or allow others to plug unknown or untrusted USB devices of
any type into your computer, particularly if the computer processes or stores
sensitive data. On Windows computers, hold the shift key down while inserting
the device and continue holding it down until windows tells you the device is
ready. This will disable any autorun functionality. You may need to double
click the folder to view the contents and, if trusted, open individual files.
- Use caution when plugging your USB device into an unknown or untrusted
computer. If the device has a write protect switch, use it. If the device
contains sensitive data, do not plug it into unknown or untrusted computers at
all.
|
