Posts

Showing posts from August, 2015

Create a Bootable UEFI USB Flash Drive

Image
Method 1: To Create a Bootable UEFI USB Flash Drive using Free Program "Rufus" 1.  Download the latest version of  Rufus  at the link below, and save it's .exe file to your desktop.    Note This is a standalone exe file that doesn't install anything to your PC. For Rufus FAQs, see:  https://github.com/pbatard/rufus/wiki/FAQ download : rufus 2.3 portable   Rufus - Create bootable USB drives the easy way 2.  Connect your  USB flash drive  if you have not already. 3.  Run the  rufus_v ### .exe  file, and click/tap on  Yes  if prompted by UAC. NOTE:  ###  = latest version number. 4.  Set Rufus with the settings below: (see screenshot below step 5) Under  Device , select the  USB flash drive  you want to format and use. Under  Format Options , check  Create a bootable disk using , click/tap on the browse icon   to navigate to and select ...

Setting a Password Policies

Image
Preface: Users can change their own passwords at anytime by pressing Ctrl-ALT-Del, clicking the Change Password button, typing their old one, and their new desired one.  This isn't bad and it's a good habit for users to get into (don't want other people figuring out the users' passwords, do you? :-/).  While setting passwords can be a good thing you don't want your users setting their passwords to, let's say, "h" or something way to easy to guess.  Unfortunately, the way Windows Server 2003 ships, users can do this.  In this tutorial we will set a minimum length, not difficult, but something that needs to be done, but gets over-looked a bit too much. Method: Click Start then Run.. In the Run box type "gpedit.msc" Under Computer Configuration Click the + next to Windows Settings, then Security Settings, then Account Policy, then Password Policy Double click Minimum password length and set a good sized password.  I will use 7...

How to Block Installation Software Using GPO

Image
Use a Software Restriction Policy (or Parental Controls) to stop exploit payloads and Trojan Horse programs from running When you use a  Standard User  account on Windows Vista, Windows 7 or Windows 8, you can enhance security by adding a  Software Restriction Policy  or using  Parental Controls . These arbitrarily prevent a broad spectrum of attacks on your system. They don't need updates, they don't slow down your computer significntly, they don't cost anything, and they protect your other layers of defense from sabotage. Show me how this works  Software Restriction Policy (as shown here) works on a simple principle: it has a list of filetypes that might be harmful, like .EXE files, and it'll only let them be run if they're in an approved location, such as the C:\Program Files and C:\Windows directories. And your non-Administrator user accounts (or something exploiting them) cannot put  new  files into those locations, with a few exceptions...