For all you Dilbert fans out there, the assumption here is that you're not reading this on your new computer. Use something else!

Windows has alot of default settings that make things "easy", but they make your computer more vulnerable. As you read thru this document you'll learn how to change a few of these default settings to help make your new computer more secure.

You can't 100% protect any computer that's connected to the internet I don't care how hard you try... the goal is simply to minimize it. With safe practices and a decently hardened computer I think it's realistic to expect approximately 3 years of life before you have to have it rebuilt (not replaced, just "redone" by someone).

Currently your computer has one account: Administrator which happens to be a member of the Administrator group (Windows security is managed by users and groups).

Depending on how the manufacturer setup your computer it might give you an opportunity to create additional users. It's important to understand that these users will also be a member of the Administrator group.

This is a security risk, because if "something" tries to do something bad to your computer, they do so under the privileges of the currently logged in user . Another words, if I'm a virus... I'm going to hope you are using an administrative account.

The solution is to make sure you have a user that is not a member of the administrators group and always log into the computer using this account. This will drastically make your computer safer against attack, though you will have to deal with the hastle of having to temporarily log in as Adminstrator to do things like:

1. Install software
2. Change the clock time
3. Write to files outside of: My Documents
4. Change system settings
5. Configure hardware or networking

Tip

To summarize: logging in as an unpriveledged user will make your computer much more resistant to spyware and viruses.

1. Open the Control Panel from the start menu
   
2. Select Administrative Tools from the Control Panel
   
3. Select Computer Management from Administrative Tools
   
4. Expand Local Users and Groups
   
5. If you have created any users already you will see them here
   
   Above is what most fresh installations of Windows XP will look like.
6. Right click on Users and select New User...
   
7. Fill out the form, mine looks like this:
   
   When finished click Create.
8. Right click on the user you just created and select Properties
   
   Then select the Member Of tab
   
9. Take note that the user is only a member of the Users group
   

Software on your computer is installed in different ways. Some is installed by the manufacturer (Dell, HP, Gateway), some is installed by the operating system or it's subsystems. Windows update is a good example of this, as it's sort of part of the operating system, and it installs stuff for you (patches and things). The rest is usually installed by you. Here's where it gets important. Software is usually installed by double clicking on a setup file such as "setup.exe". Usually this is followed by a series of prompts which some people referr to as a "wizard". Either way the result is that your system has new files and settings which represent the software you just installed.

What's confusing is when software gets installed... but how it got there is a mystery. For example, let's say you have "Gator" installed on your computer and it's driving you nuts. You likely don't remember installing it, nor anyone else. It could have been installed several different ways but I do happen to know that installing "Comet Cursor" I think it was, would also install "Gator" without really telling you. This is extremely significant because it illustrates that when you install something, it might do things that you don't expect. It's very important to think before you install something, because clicking on that "setup.exe" file ultimately lets the person who wrote the software have complete control over your system for the duration that it's being installed.

Below you'll find a list of software packages that are considered at least by me to be professional and trustworthy.

Since NOT using Internet Explorer is probably the best thing you can do to keep your computer safe, let's go thru how to install Firefox:

1. Remember you need to log in as Administrator to do this.
2. Use Internet Explorer (it's all you have right now) to download the installation file from http://www.mozilla.com/firefox/ and click on the "Download Firefox" link.
   
3. When prompted, remember to Always "Save" the file. Never choose "Run".
   
   The file will defautly be placed on your desktop, so you know where to find it after it's finished downloading.
4. Double click on the Firefox Setup executable file placed on your desktop to begin the installation.
   
   Follow the prompts, taking the defaults is just fine.
5. When the installation is finished, it will place an icon on your desktop that you can use to start the application. If you like to use the Quicklaunch icons, it will be there also
6. Ok, remembering our good practice here... if there's no other software to install:

   Remember to log out, and log back in as your unpriviledged user!

All you need to do is enable Windows Update to manage that for you. But because this is a brand new computer, you need to manually patch it.

It's important to understand that this should be the first time your computer has ever been plugged into the internet and the goal is to get it patched as quickly as possible.

1. You need to be logged into your computer as the Administrator to install patches manually.
2. Select Windows Update from the startup menu
   
3. Internet Explorer will open, look for something like this
   
   You want to click on the Express button to get high priority updates.
4. You will be presented with a list of patches that need to be applied
   
   Click on Install Updates to install them.
5. You will see the patches download and install...
   
6. When it's finished it will most likely prompt you to restart your computer. Sometimes this isn't neccessary.
   
7. When your computer has finished rebooting, repeat this process over and over until you see this when looking for new updates:
   

1. Click on Windows Update from the start menu like you did before, and look toward the right this time
   
2. If it says Turn on Automatic Updates then click on it and select a time that your computer is likely to be turned on.
   
3. You're all finished, click OK and log in as your unpriviledged user :)

1. Install the Google toolbar as it will block popups. This will limit the number of Phishing dialog boxes that will popup, which if clicked on could install malware of some kind.

1. Downloading
2. Clicking
3. Email
4. Phishing