Securing Microsoft Windows XP

This section covers the basic steps you need to take to keep your Windows XP computer secure and free of viruses: setting your computer to check for virus updates automatically, turning on your firewall, managing the accounts on your computer, and creating secure passwords.

Automatic Update - Windows XP

One of the best ways to keep your computer secure is to regularly update your software. You can set your computer to check for updates automatically. When you first install Windows XP, you will be asked whether you want to check for and install updates regularly. If Windows does not do this, or if you are unsure whether you have automatic updates activated, follow these steps:

1. Go to the Start menu.
2. Click Control Panel.
3. Click Automatic Updates. A dialog box similar to the one shown below will open.
   
   
4. Select the Automatic option. This will configure your computer to check for updates automatically.
5. You can also choose how often and when you want Windows to check for updates, using the drop-down menus under the Automatic option. We recommend that you set your computer to check for updates once a week. You should enter a date and time when your computer will be turned on and connected to the Internet. You might also consider setting a time when you would not be sitting at your computer as the updating process can slow down the overall performance of your computer. If you miss the automatic update cycle because your computer was not turned on, don't worry, your computer will grab updates the next time it has access to the Internet.

Turning on the Firewall

A firewall is used to prevent unwanted intruders accessing your computer. For example, when a program on your system tries to access an outside network, it first needs permission from your firewall.

To turn on the Windows XP Firewall, follow these steps:

1. Go to the Start menu.
2. Click Control Panel.
3. Click Windows Firewall. A dialog box similar to the one shown below will open.
   
   
4. Select On.
5. Click OK.

Account Management

To control who can access your computer, you should have at least a basic knowledge of account management. If you are a Windows XP user, you are probably using an account that you generated when you first set up your computer. Windows XP usually generates a number of other accounts automatically that you might not even realize are there, including an Administrator account with NO PASSWORD! Many viruses target these unprotected pathways into your computer.

To edit the user accounts on your computer, follow these steps:

1. Go to the Start menu.
2. Click Control Panel.
3. Double-click User Accounts. The User Accounts window will open, similar to the one shown below, showing the user accounts on your computer.
   
   
4. To edit the user accounts on your computer, select an account by clicking it. A window will open, showing a list of editing options. From here, you can change the username, password, or picture of an account, or delete an account.

Account Password Management

We recommend that you make sure that all user accounts on your computer have a good password. For Windows XP systems, it is especially important to give every administrator account a secure password, as these accounts have the most freedom. Manage your passwords carefully. You should think of your account password as the equivalent of locking your house or car. Here are some tips for password management:

• Random - When deciding on your password, avoid the more obvious choices, such as the name of your pet or your birthday. A good password is one that is more random in nature. Include both letters and numbers, and use a combination of both lower case and upper case letters.
• Variation - If you have multiple user accounts, we recommend that you use a different password for each account.
• Hard Copy - Many security experts warn against writing down a password, in case it falls into the wrong hands. However, we recommend that you maintain a hard-copy of your passwords in a safe location, somewhere that only you have access to, for example a locked file cabinet or safe. We feel that this is a safer option than using only a limited number of passwords.

To change a password on a user account, follow these steps:

1. Go to the Start menu.
2. Click Control Panel.
3. Click User Accounts. The User Accounts window will open, showing the user accounts on your computer.
4. Click Change an Account.
5. Click the account whose password you want to change.
6. Click Create a Password.
7. Enter your new password, and then enter a password hint.
8. Click Create Password.