Operating system security precautions: Win XP

3. Disabling Terminal Services Remote Control


"Terminal Services" is a form of service left over by Windows XP on Windows 2000 (Windows 2000 uses this service for remote server hosting). Users can use the terminal to achieve remote control. "Terminal Services" and "Remote Assistance" are different. Although they all implement remote control, Terminal Services pays more attention to the user's login management rights. Each connection requires a specific login ID of the current system, and each other. Isolation, "Terminal Services" is independent of the invitation of the current computer user, can independently and freely log in to the remote computer.

Under Windows XP, "Terminal Services" is opened by default (Windows 2000 system needs to install the corresponding components before you can open and use Terminal Services). That is, if anyone knows on your computer A user login ID, and know the IP of the computer, it can completely control your computer.

The method of closing "Terminal Services" in Windows XP system is as follows: Right-click "My Computer", "Properties", select "Remote" item, and remove the "Allow users to connect to this computer remotely" You can do it.

4. Closing the Messenger Service

The Messenger service is a communication component that Microsoft integrates into Windows XP. It is also opened by default. When using it to send information, as long as you know the IP of the other party, and then enter the text, the corresponding text message window will pop up on the other party's desktop, and will be accepted if the Messenger service is not closed.

many users do not know how close it, and suffered harassment information. In fact, the method is very simple, enter the "Control Panel", select "Administrative Tools", start the "Services" item inside, then right click on the Messenger item, select "Stop" (Figure 4).

5. Prevent IPC default sharing


Windows XP allows any user to get all account and share lists of the system through the empty user connection (IPC$) after the default installation. This is to facilitate LAN users to share resources and files. , but any remote user can use this empty connection to get your list of users. Hackers use this feature to find a list of users on the system and use some dictionary tools to attack the system. This is the more popular IPC attack on the Internet. To guard against attack

IPC should start from the default configuration of the system, you can modify the registry to plug the loopholes:

first step: HKEY_LOCAL _MacHINE \\ SYSTEM \\ CurrentControlSet \\ Control \\ LSA of the RestrictAnonymous The item is set to "1" to disable empty user connections.

Step 2: Open the HKEY_LOCAL_MacHINE\\SYSTEM\\CurrentControlSet \\Services\\ LanmanServer\\Parameters entry in the registry.

For the server, add the key value "AutoShareServer", the type is "REG_DWord", and the value is "0".

For the client, add the key value "AutoShareWks", type "REG_DWord", and the value is "0".

6. Rational Management Administrator


Windows 2000/XP system, after installation, the system will create an Administrator user by default, which has the highest management authority of the computer. Some users did not set a password for the Administrator user at the time of installation. Hackers use this to log in to the other computer using an advanced user. Therefore, individual users should properly keep the “Administrator” user information. When Windows 2000 logs in, it is required to enter the login password of the Administrator user. After Windows XP is started normally, the Administrator user cannot be seen. It is recommended that users using Windows XP enter the security. Mode, then add a password for the Administrator user in the "User Account" item of the "Control Panel", or delete it to avoid leaving hidden dangers.

for the personal security of the operating system, I will introduce two Windows 98 and Windows XP, as Windows 2000 Professional and Server because it has a version of the points, two versions of Windows 2000 and Windows XP similar forms of protection Windows 2003, here is not a separate introduction, the following is the Windows 2003 and Linux systems for the server.