Malwareteks: Forums / Windows XP / Configuration

Forums

Malwareteks :: Forums :: Windows :: Windows XP		<< Previous thread \| Next thread >>
Configuration


Moderators: ShadowPuterDude, Greg, D3m3nt3d, Brandon, Vmarm, peterparker, siljaline, jholland1964, TurcoLoco, Windsor, JeanInMontana, KZ, RatHat, Jason Amison, MrCharlie

Author

Post

Speedy

Fri May 30 2008, 02:18PM

Registered Member #84

Joined: Sat Aug 04 2007, 09:49PM
Location: Seattle, Washington
Posts: 58
Thanked 0 times in 0 posts

So I have a client that is basically one of the least computer savvy people I've ever come across. She screwed up her computer pretty badly and I was able to fix that, but now she just wants to me to do a complete reload on it, so I'm bringing the computer here so I don't have to hunt down drivers on dial-up, which is cool with her because she doesn't use it a ton, especially towards the months beginning and end. I've got plenty of time to do a back-up and restore.

She wants the setup to last her at least a year or 2 till she can afford to buy a new computer. This is fine, all within my general list of things I do.

So here's where I want to tap your knowledge because I need opinions and possibly some instruction.

1. She has grandkids and an ex-husband who don't know what they are doing either. I need to lock it down so that if needed they can install software, probably by providing a password. I know this can be done by putting them in Limited User mode, but that also disables a whole bunch of their rights that I don't want to disable.

2. Free anti-spyware/anti-virus: She is very good about running this stuff every 2 weeks. I was going to give her SuperAntiSpyware and FreeAVG. When I did the checkup on her computer last time it only found 4 things and those were all tracking cookies. Do you think this should be sufficient?

3. XP SP3. I was kicking around the idea of putting XP SP3 on there just so that she has the absolute latest update. Being as this is a brand new install, I'm figuring that if SP3 breaks it, I can always go back to SP2.

However, I was wondering if you had heard anything about SP3 breaking anything. I've heard it breaks certain configurations with AMD machines, but I haven't had a chance to try it out myself. Do you think I should install it or just leave it be with SP2?

4. Is there anything else you would suggest I do to this machine? Basically, I don't want to deal with it again for a long time aside from yearly maintenance and as long as she can still get her pictures from her camera, use word docs, and check her email, she doesn't really care what I do with it. However, along the same lines as earlier, I don't want her to feel like she is in a really locked down environment like at work. I just want to make the machine less susceptible to being knocked around at the hands of clueless people.

Thanks

[ Edited Fri May 30 2008, 02:19PM ]

ShadowPuterDude

Sat May 31 2008, 09:42AM

...the Shadow knows

Registered Member #1

Joined: Thu Apr 27 2006, 04:52PM
Location: Northern NY
Posts: 251
Thanked 12 times in 12 posts

What you want is a Power Users Group, which doesn't exist on XP Home Edition.

To apply the Compatws.inf Securiy Template using Secedit, which again, are not deployed with XP Home Edition.

Download:
Compatws.inf (Right-Click and Save As) to C:\WINDOWS\security\templates
Secedit.exe to C:\WINDOWS\System32
Secedit.chm to C:\WINDOWS\help

Apply the Security Template from the Command Line using the following command: secedit /configure /cfg compatws.inf /db compatws.sdb

Go get a cup of coffee, as this may take a bit of time to apply.

MS TechNet Article on Selecting Predefined Security Templates

WARNING: Users that are in the Power Users Group will have limited Administrator rights.

Service Pack 3 for Windows XP should be applied immediately after the the Clean Install is finished. I only know of Norton having issues with SP3 and that is only during an upgrade if Norton is installed after SP3 is applied there are no issues.

There are problems with endless reboots on OEM machines with AMD processors and applying SP3. This is because some manufactures deploy the same Sysprep image to Intel-based computers that they do to AMD-based computers, all have the intelppm.sys driver installed and running. AMD-based computers need to have the amdk8.sys driver installed.

HP fix: Microsoft Windows XP SP3 Upgrade Utility for systems with AMD processors

Other work around: Here, Here, and Here.

SAS is a good product. IMO AVG 8 has become bloated and the FP rate is unacceptably high. Also keep in mind that AVG 8 is now an Integrated product both an Anti-Virus and an Anti-Spyware.

I would also urge you to consider installing Spybot Search & Destroy and SpywareBlaster. Do not enable the TeaTimer function of Spybot.

"Only those who fail greatly can ever achieve greatly" - Robert F. Kennedy
Microsoft Most Valuable Professional - Consumer Security (2007-2008)
Member - Alliance of Security Analysis Professionals - Since 2006
Linux Registered User # 363218

This post has been thanked 1 time

Speedy

Sat May 31 2008, 12:51PM

Registered Member #84

Joined: Sat Aug 04 2007, 09:49PM
Location: Seattle, Washington
Posts: 58
Thanked 0 times in 0 posts

Excellent, this is exactly the information I was looking for. It looks like as soon as the backup is finished, which may take a while in it's own right, I should be good to get started.

Thanks a ton

ShadowPuterDude

Sat May 31 2008, 02:36PM

...the Shadow knows

Registered Member #1

Joined: Thu Apr 27 2006, 04:52PM
Location: Northern NY
Posts: 251
Thanked 12 times in 12 posts

Actually, this would be a far safer method of adding a User Group to XP Home: http://www.xphometools.com/usecases.aspx

I've never used either one of those programs. 15 day trial period.

Speedy

Wed Jun 11 2008, 08:53PM

Registered Member #84

Joined: Sat Aug 04 2007, 09:49PM
Location: Seattle, Washington
Posts: 58
Thanked 0 times in 0 posts

I wound up putting XP Pro on it and everything turned out perfect, with the exception of the fact that her printer doesn't work now.

This however is a case of operator error. I told her she actually needs to install the printer before she can use it. Thanks again!

ShadowPuterDude

Thu Jun 12 2008, 07:41AM

...the Shadow knows

Registered Member #1

Joined: Thu Apr 27 2006, 04:52PM
Location: Northern NY
Posts: 251
Thanked 12 times in 12 posts

XP Pro, good choice. Home Edition doesn't give a lot of flexibility for user groups, it's all or nothing with Home.


Jump: Back to top