Home Protect Your Computer and Data Windows XP Computers

Securing Computers Running Windows XP

To secure computers running Windows XP, install the latest patches, enable a firewall, and install and use up-to-date antivirus software.

Installing Patches and Enabling Firewall and Antivirus Software

If your computer is running Windows XP Service Pack 3, follow these steps to use the Windows Security Center for managing settings for installing patches and enabling firewall and antivirus software:

1. Click the Start button in the lower left corner of your desktop.
2. Click Control Panel (or click Settings then Control Panel depending on your system).
3. Double-click Security Center to display the following window.
   
   

The Windows Security Center checks to make sure your system has a software firewall enabled, an up-to-date antivirus program running, and Automatic Updates configured to download and install updates automatically.

Notes:

• If any information in your system's Security Center is missing for any of these three essential areas, your system will display an alert similar to the following one in your desktop's notification area, which is on the right of the taskbar above the clock, until the problem is fixed.
  
  
  
• You can learn how to address a problem, by clicking the alert to open the Security Center window. In the Security Center window, click Recommendations.
• If your computer is part of a domain (a group of computers on a network), your security settings are usually managed by a network administrator. When that is the case, your security status is not displayed in the Security Center window does not display, and your desktop does not display alerts.
• If you have not yet upgraded to Windows XP Service Pack 3, you should upgrade as soon as possible, as described in the next section.

Upgrading to Windows XP SP3

If you have not yet upgraded to Windows XP Service Pack 3, you should upgrade as soon as possible. After upgrading, use the Windows Security Center as described above. Before you upgrade to Windows XP SP3:

• Back up your data.
• Check your computer for spyware and other unwanted software. (Spybot is a recommended spyware identification and removal program.)
• Check for any special update instructions from your computer's manufacturer.

To upgrade, download Windows XP SP3 from Windows Update. (If you cannot download Windows XP SP3 via Windows Update, order a CD.)

Securing Windows Servers

If you are running a Windows server, use the Security Configuration Wizard (SCW) to secure it. (SCW is available only for Windows Server 2003 Service Pack 1. If you cannot upgrade to Windows Server 2003 Service Pack 1, use the links at the bottom of this page to access Microsoft information for securing Windows Servers.)

Installing the Security Configuration Wizard

1. Click the Start button in the lower left corner of the screen.
2. Click Control Panel (or click Settings then Control Panel depending on your system).
3. Double-click Add or Remove Programs.
4. Select Add/Remove Windows Components.
5. Check the box for Security Configuration Wizard, then click Next.

Configuring the Security Configuration Wizard

1. Click the Start button.
2. Click Run.
3. Type scw.exe, and press Enter.
4. Choose Create a New Security Policy, which is the default option. (Notice that the option to Rollback the previous security policy is available.)
5. As you go through the wizard, enable only the functionality that your server requires and answer all questions accurately.

If the security policy created and applied by the Security Configuration Wizard breaks required functionality, check the responses you entered when you used the wizard to determine if one or more responses contain incorrect information. To undo the policy you created, select the Rollback option (see step 4, above). Then rerun the wizard. Further documentation regarding SCW is available.

Related Windows Security Links

• Windows XP Security Guide: Detailed guidance on securing Windows XP
  
• Windows Server 2003 Security Guide: Detailed guidance on securing Windows Server 2003
  
• Microsoft Product Security: Detailed guidance on securing numerous Microsoft operating systems and applications
• Malware Removal Tools: Software for removing spyware and other unwanted software