Windows XP Security Guide

Brief Description

This guide provides detailed technical information for customers who are interested in hardening deployments of Microsoft Windows XP with Service Pack 2 (SP2) on desktop and laptop client computers in different types of environments.

Overview

The Windows XP Security Guide has been updated to provide specific recommendations about how to harden computers that run Windows XP with SP2 in three distinct environments:

Enterprise Client (EC). Client computers in this environment are located in an Active Directory directory service domain.
Stand-Alone (SA). Client computers in this environment are not members of an Active Directory domain.
Specialized Security - Limited Functionality (SSLF). Client computers in this environment are subject to extraordinary security concerns. These concerns are so great that a significant loss of functionality and manageability is acceptable.

Information about the security features in SP2 was included as an appendix to the previous version of this guide. This information has now been integrated throughout the guide, and thoroughly tested templates for Windows Firewall security settings (Windows Firewall replaced the Internet Connection Firewall in SP2) are provided. This guide also includes information about closing ports, Remote Procedure Call (RPC) communications, memory protection, e-mail handling, Web download controls, spyware controls, and much more.
This guide is primarily intended for consultants, security specialists, systems architects, and IT planners who plan application or infrastructure development and the deployment of Windows XP workstations in an enterprise environment. It is not intended for home users, but for individuals whose job roles include the following:

Systems architects and planners who are responsible for driving the architecture efforts for the workstations in their organizations.
IT security specialists who are focused on providing security across platforms within an organization.
Business analysts and business decision makers (BDMs) who have critical business objectives and requirements that need IT desktop or laptop support.
Consultants from both Microsoft Services and partners who need knowledge-transfer tools for enterprise customers and partners.

Note: On February 18, 2009, an updated version of the Windows XP Security Compliance Management Toolkit was released as part of the Security Compliance Management Toolkit Series. Please go to the Security Compliance Management Toolkit Series location on the Microsoft Download Center to get the Windows XP Security Compliance Management Toolkit.

Send questions or feedback to us directly at secwish@microsoft.com

Top of page

System Requirements

Supported Operating Systems: Windows 2000 Service Pack 4; Windows Server 2003; Windows XP

Any version of Microsoft Word or Microsoft Word Viewer 2003

Top of page

Instructions

No Specific Instructions

Top of page

Additional Information

Solution Accelerators are free, scenario-based guides and automations designed to help IT Professionals who are proactively planning, deploying, and operating IT systems using Microsoft products and technologies. Solution Accelerator scenarios focus on security and compliance, management and infrastructure, and communication and collaboration.

Get the Solution Accelerator Notifications Newsletter

Subscribe to the Solution Accelerator Notifications newsletter so that you can stay informed about new Solution Accelerator releases and updates. The newsletter covers such areas of interest as

Communication & Collaboration
Security, Data Protection, & Recovery
Deployment
Operations & Management

You may also receive invitations to participate in accelerator development via beta programs and customer surveys. Solution Accelerator Notifications is currently available in English only.

If you’ve used a Solution Accelerator within your organization, please share your experience with us by completing this short survey (less than ten minutes long).

Top of page