Step-by-Step Guide to Securing Windows XP Professional with Service Pack 2 in Small and Medium Businesses
Published: January 8, 2004 | Updated: August 31, 2004
Overview
The ever-growing threat of malicious code – such as worms, viruses, and Trojan horses – makes it critical for all customers to take immediate action to help lock down their desktop and laptop systems. This guide explains how to implement the security measures recommended in the Microsoft® Windows XP Security Guide in a small or medium business environment without an Active Directory® directory service deployment. These recommendations help ensure that your desktop and laptop systems running Windows XP Professional Service Pack 2 (SP2) are more secure from the majority of current security threats. These recommendations also help ensure that users can continue to be efficient and productive with their computers. In addition to the advanced step-by-step guidance in this document, you will also find information on the top security recommendations that Microsoft is making to all customers, from home users to enterprise workers. These recommendations include:
| • | Use a firewall such as Windows Firewall, which is included in Windows XP SP2 (and replaces the Internet Connection Firewall). |
| • | Use Microsoft Windows Update to get and keep your PC up-to-date. |
| • | Install antivirus software and ensure it is up-to-date. |
This guide provides step-by-step deployment guidance and troubleshooting advice for information technology (IT) professionals and system administrators in a small to medium sized organization.
For more information on the particular settings that are applied by following this guidance and their potential impact, please refer to the complete Windows XP Security Guide. To create customized security templates based on the specific needs of your organization, refer to the Threats and Countermeasures Guide.
Who Should Read this Guide
You should read this guide if you are planning to deploy Windows XP, or if you are currently administering a number of computers running Windows XP Professional and want to implement a base level of security and protect your desktops and laptops with minimal impact on end users.
This guide is written for the average small or medium business administrator who may not have extensive training on Microsoft products but needs a quick, step–by–step guide to securing Windows XP in their organization.
This guide does not address the wide variety of needs and configurations that may be required in a large organization. Additionally, it may not fully address the specific security needs of some organizations. For additional security options and customization information, please refer to the Windows XP Security Guide.