ICF and Security

[Susan]

Small organization just installed new computer with XP
Pro on it. They have no firewall so ICF needs to be set
up and I think Windows Messenger Service disabled too. I
am also new to XP Pro and am wondering about setup of
ICF. I understand Administrator account needs to be first
setup before ICF.

My question is if the Administrator account is set up, is
this going to open the door to complex security rules
that have to be set up to allow one person to use the
computer? Computer is not networked.

[Carey Frisch [MVP]]

HOW TO: Enable or Disable Internet Connection Firewall in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;283673&Product=winxp

How to Prevent Windows Messenger from Running on a Windows XP-Based Computer
http://support.microsoft.com/default.aspx?scid=kb;en-us;302089&Product=winxp

HOW TO: Create and Configure User Accounts in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;279783&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------

"Susan" > wrote in message:
...

| Small organization just installed new computer with XP
| Pro on it. They have no firewall so ICF needs to be set
| up and I think Windows Messenger Service disabled too. I
| am also new to XP Pro and am wondering about setup of
| ICF. I understand Administrator account needs to be first
| setup before ICF.
|
| My question is if the Administrator account is set up, is
| this going to open the door to complex security rules
| that have to be set up to allow one person to use the
| computer? Computer is not networked.

[Tom Foolery]

Susan, I was not aware of the need to have the admin account configured
before ICF, and I don't think there are any complex rules governing its
setup. In any case, since ICF is pretty widely viewed as only "better than
nothing at all" your organization might want to consider a more "robust"
firewall arrangement such as ZoneAlarm. Consider the information presented
here:


http://www.techtv.com/products/software/story/0,23008,3338448,00.html







"Susan" > wrote in message
...
> Small organization just installed new computer with XP
> Pro on it. They have no firewall so ICF needs to be set
> up and I think Windows Messenger Service disabled too. I
> am also new to XP Pro and am wondering about setup of
> ICF. I understand Administrator account needs to be first
> setup before ICF.
>
> My question is if the Administrator account is set up, is
> this going to open the door to complex security rules
> that have to be set up to allow one person to use the
> computer? Computer is not networked.

[Susan]

Thank you Carey. Please tell me if the XP Pro firewall is
enough or would you recommend buying a firewall?
>-----Original Message-----
>HOW TO: Enable or Disable Internet Connection Firewall
in Windows XP
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;283673&Product=winxp
>
>How to Prevent Windows Messenger from Running on a
Windows XP-Based Computer
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;302089&Product=winxp
>
>HOW TO: Create and Configure User Accounts in Windows XP
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;279783&Product=winxp
>
>--
>Carey Frisch
>Microsoft MVP
>Windows XP - Shell/User
>
>Be Smart! Protect your PC!
>http://www.microsoft.com/security/protect/
>
>---------------------------------------------------------
--------------------------
>
>"Susan" > wrote in
message:
> ...
>
>| Small organization just installed new computer with XP
>| Pro on it. They have no firewall so ICF needs to be
set
>| up and I think Windows Messenger Service disabled too.
I
>| am also new to XP Pro and am wondering about setup of
>| ICF. I understand Administrator account needs to be
first
>| setup before ICF.
>|
>| My question is if the Administrator account is set up,
is
>| this going to open the door to complex security rules
>| that have to be set up to allow one person to use the
>| computer? Computer is not networked.
>.
>

[Bruce Chambers]

Greetings --

WinXP's built-in firewall is adequate at stopping incoming attacks,
and hiding your ports from probes. It doesn't give you any alarms to
tell you that it is working, though. What WinXP also does not do, is
protect you from any Trojans or spyware that you might download and
install inadvertently. It doesn't monitor out-going traffic at all,
much less block (or at least ask you about) the bad or the
questionable out-going packets.

ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
built-in firewall, and are much more easily configured, and there are
free versions of each readily available. Even Symantec's Norton
Personal Firewall is superior by far, although it does take a heavier
toll of system performance then do ZoneAlarm or Sygate.


Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

"Susan" > wrote in message
...
> Thank you Carey. Please tell me if the XP Pro firewall is
> enough or would you recommend buying a firewall?
>>-----Original Message-----
>>HOW TO: Enable or Disable Internet Connection Firewall
> in Windows XP
>>http://support.microsoft.com/default.aspx?scid=kb;en-
> us;283673&Product=winxp
>>
>>How to Prevent Windows Messenger from Running on a
> Windows XP-Based Computer
>>http://support.microsoft.com/default.aspx?scid=kb;en-
> us;302089&Product=winxp
>>
>>HOW TO: Create and Configure User Accounts in Windows XP
>>http://support.microsoft.com/default.aspx?scid=kb;en-
> us;279783&Product=winxp
>>
>>--
>>Carey Frisch
>>Microsoft MVP
>>Windows XP - Shell/User
>>
>>Be Smart! Protect your PC!
>>http://www.microsoft.com/security/protect/
>>
>>---------------------------------------------------------
> --------------------------
>>
>>"Susan" > wrote in
> message:
>> ...
>>
>>| Small organization just installed new computer with XP
>>| Pro on it. They have no firewall so ICF needs to be
> set
>>| up and I think Windows Messenger Service disabled too.
> I
>>| am also new to XP Pro and am wondering about setup of
>>| ICF. I understand Administrator account needs to be
> first
>>| setup before ICF.
>>|
>>| My question is if the Administrator account is set up,
> is
>>| this going to open the door to complex security rules
>>| that have to be set up to allow one person to use the
>>| computer? Computer is not networked.
>>.
>>

[Susan]

I know about the free versions for home users. I was
inquiring for small local non-profit org. I use Sygate on
home desktop after I got the Blue Screen of Death with
Zone Alarm. KB Q297725 article said to uninstall it. I
know many people like Zone Alarm but I guess I was one of
few who experienced problems.

Thank you for your response.

Susan
>-----Original Message-----
>Greetings --
>
> WinXP's built-in firewall is adequate at stopping
incoming attacks,
>and hiding your ports from probes. It doesn't give you
any alarms to
>tell you that it is working, though. What WinXP also
does not do, is
>protect you from any Trojans or spyware that you might
download and
>install inadvertently. It doesn't monitor out-going
traffic at all,
>much less block (or at least ask you about) the bad or
the
>questionable out-going packets.
>
> ZoneAlarm, Kerio, or Sygate are all much better than
WinXP's
>built-in firewall, and are much more easily configured,
and there are
>free versions of each readily available. Even
Symantec's Norton
>Personal Firewall is superior by far, although it does
take a heavier
>toll of system performance then do ZoneAlarm or Sygate.
>
>
>Bruce Chambers
>--
>Help us help you:
>http://dts-l.org/goodpost.htm
>http://www.catb.org/~esr/faqs/smart-questions.html
>
>You can have peace. Or you can have freedom. Don't
ever count on
>having both at once. -- RAH
>
>"Susan" > wrote in
message
...
>> Thank you Carey. Please tell me if the XP Pro firewall
is
>> enough or would you recommend buying a firewall?
>>>-----Original Message-----
>>>HOW TO: Enable or Disable Internet Connection Firewall
>> in Windows XP
>>>http://support.microsoft.com/default.aspx?scid=kb;en-
>> us;283673&Product=winxp
>>>
>>>How to Prevent Windows Messenger from Running on a
>> Windows XP-Based Computer
>>>http://support.microsoft.com/default.aspx?scid=kb;en-
>> us;302089&Product=winxp
>>>
>>>HOW TO: Create and Configure User Accounts in Windows
XP
>>>http://support.microsoft.com/default.aspx?scid=kb;en-
>> us;279783&Product=winxp
>>>
>>>--
>>>Carey Frisch
>>>Microsoft MVP
>>>Windows XP - Shell/User
>>>
>>>Be Smart! Protect your PC!
>>>http://www.microsoft.com/security/protect/
>>>
>>>-------------------------------------------------------
--
>> --------------------------
>>>
>>>"Susan" > wrote in
>> message:
>>> ...
>>>
>>>| Small organization just installed new computer with
XP
>>>| Pro on it. They have no firewall so ICF needs to be
>> set
>>>| up and I think Windows Messenger Service disabled
too.
>> I
>>>| am also new to XP Pro and am wondering about setup of
>>>| ICF. I understand Administrator account needs to be
>> first
>>>| setup before ICF.
>>>|
>>>| My question is if the Administrator account is set
up,
>> is
>>>| this going to open the door to complex security rules
>>>| that have to be set up to allow one person to use the
>>>| computer? Computer is not networked.
>>>.
>>>
>
>
>.
>