How can I secure my system?

[Trillian]

Hi,

I'm used to linux, where users have to login in order to do anything on the system. I've even secured my bootloader: if you don't have a password, neither windows nor linux will boot.

However, once I'm on windows, the security level I've got in linux vanishes. There is no login manahger you can't [ESC] or [cancel] away.
Sure, I've installed some virusscanners, and ad aware/spyware scanners, but I want to have my system secure and safe!


Now, I have googled this problem, but I can't find a good solution, except for Zonealarm, though this will cost me money.

Has anyone got a good solution for this.. somewhat paranoid problem?

[don77]

Hi
Go here http://www.cybertechhelp.com/forums/showthread.php?t=12901

Free Zone Alarm firewall
Spyware prevention tools.
All for the very low low price of free!! they work well
Remebr to keep windows sercurity and critical updates in order and your AV current and running a weekly scan
Run Ad-aware weekly always checking for updates prior to running same goes for spybot
And you should be able to ward off most anything

[degsy]

Virus Scanners and Firewalls are not the Issue as they start after you log on.

There are various ways to get 98 to be semi-secure, but not properly secure and that would probably go for NT and Linux too.

98 allows profiles,
So you could create a profile for each user.
Also, using registry tweaking you can disable the Cancel button at logon.
Added to that you can disable booting from FDD/CD and password protect the BIOS.


All of it has a workaround.
What did you have in mind?

[Trillian]

@don77: I've allready got adaware, spybot, and norton anitvirus. Furthermore I've got a built-in firewall in my router. I've downloaded zonealarm once, but this only works after you boot up windows and log in.
I want to have full controll over my computer, and have a login manager, just to feel safe.
But thanks anyway.


@degsy: I'd like to tweak that login manager, so that it's safe and reliable. I have used those profiles before, but since you could easily login without a password, i found it of no use.
Now, I've googled some, but didn't really find how to tweak the register. Could you maybe give me some tips, on how to do thihs succesfully?

[renegade600]

Unfortunately you cannot secure win98 that well at least not like you are wanting to do. You really need winnt, win2k, winxp pro, win2003

[degsy]

All of it has a workaround.Unfortunately none of it is really secure.

Although you can use registry tweaks and System/Group Policies you can still login to Safemode to remove them.

For a more secure system, booting wise, then look into adding a BIOS/Boot password.



For that "Cancel" button tweak then in regedit goto
HKEY_LOCAL_MACHINE\Network\Logon
Create a new DWORD value, or modify the existing value called "MustBeValidated" and set it to equal "1"

[Trillian]

Ok, changed the register.

I'm using a BIOS password, and a grub password, and the logon password.
It's just that I have none faith of whatsoever in windows and her security, so finding out about ways to secure it can only be good ;)

tnx.

[degsy]

As Dan said, you cannot really secure 9x.
The basic security there can be easily overwriden.