As lovers of checklists, here's an example of what we do when setting up a new IBM computer. Feel free to copy and adjust this list for your needs. This list assumes you follow our recommendations on protection programs and system updates.
- Connect hardware and power up the computer (do not connect printers or other peripherals until #18—only connect keyboard, mouse, monitor and broadband internet or a phone line).
- Initially register PC and Windows to IBM and Microsoft (and activate Windows if connected to broadband internet), perform initial setup:
- Setup a single user account (unless you simply must have more than one).
- Setup internet access via LAN (if non-standard) or dial-up.
- Remove pre-installed MSN Explorer unless user will actually use it.
- Create strong passwords for user account(s) & administrator account, disable guest account.
- Record PC model and serial numbers.
- Set workgroup name (if you will be sharing files among computer in a home or office network).
- Download and install TweakUI and set for auto-login using user password (if single user account is used)
- Download and install all available updates to Windows XP (multiple iterations with system restarts) and set up for automatic update (auto-install). First install SP2 using the Express Install method. After that is done, re-run Windows Update and choose the Custom Install to get any additional updates as appropriate.
- Download and install the latest versions of IBM Access Connections, IBM Message Center, and IBM Update Connector. Also download (but don’t install yet) the latest version of IBM’s Rescue & Recovery. Check for the latest BIOS available online, and verify against the system’s BIOS (see System Information). Use IBM Access Connections and the IBM Update Connector to download and install any available updates, especially any BIOS or device drivers that are newer than the ones installed (verify against the versions showing in System Information, Device Manager or Add/Remove Programs).
- Download and/or install new (free) programs (only current versions, directly from the listed website):
- Google Toolbar
- Macromedia Flash Player
- Macromedia Shockwave Player
- Adobe Acrobat Reader. Also run the program and check for updates (do not install any trialware or the download manager).
- Spybot Search & Destroy and install all available updates. Then scan your system and remove any spyware it finds.
- Download and install new programs (only current versions, either shrink-wrapped software packages or online purchases from a reputable online vendor):
- Zone Alarm Security Suite. After fully installed, run
the update feature for antivirus and antispyware. Complete initial scan.
- Open all programs that access the internet to begin training the firewall. Check the "Remember this setting" box to authorize ongoing access for programs.
- Counterspy. After fully installed, run the update
feature and do a complete scan, removing anything it finds.
- MS Office 2003 and all available updates to Office (may have multiple iterations with system restarts).
- Download/install Office add-ons (if Office installed): Powerpoint templates, Office Sounds, Outlook Backup.
- Setup Outlook backup as daily or weekly to My Documents folder.
- Setup Outlook for email account(s), customize Outlook:
- Add "is Junk" button to toolbar (use sad face icon), change icon for "not Junk" button to smiley face, open an email and add both an "Is Junk" and "Not Junk" button to the toolbar, import enhanced list of blocked senders (to filter spam), add "safe senders" such as "@positek.net", set to close original message on reply, set initial view to folder and list (icons minimized), create work and personal sub-folders for message filing, set to not use Word for message creation, startup Outlook in Inbox view, HTML format for new messages, create signature, turn off reading pane for inbox and junk mail message folders.
- Setup multiple "send only" accounts for alternate return addresses in Outlook if needed.
- Set Word options to show text boundaries, auto-save to 3 minutes, show recent documents to max
- Run security checks at Gibson Research Corporation, scan for vulnerabilities and note result/follow recommendations, use "3 Musketeers" to disable DCOM, Windows Messenger, UPnP.
- Setup IE with default homepage, edit options to disable script debugging, turn off Google toolbar options: blog, autofill, news (or leave on autofill if user will use that feature).
- Go to PC Pitstop and run tests, follow recommendations for changes to IE settings.
- If needed, install Sun Java runtime from (most IBM models are now shipping with an IBM java engine installed so this may not be necessary).
- Create "Computer & Network Maintenance" favorites folder with icons for all appropriate programs and site links, shortcut on desktop to this folder.
- Create documents in Computer & Network Maintenance favorites folder:
- Computer operation hints including any network management functions.
- ISP support info.
- IBM warranty support & support info with model/serial number, link to Access IBM, & tech support phone number.
- Computer maintenance instructions document
- Clean desktop of most icons, set system tray to not hide icons. Turn off Desktop Cleanup Wizard.
- Organize the Start and All Programs menus, customize the System Tray actions. Create “Programs” and “Utilities” program group folders under All Users, move redundant program groups to Programs folder, utilities to Utilities folder. Copy any useful icons to the root Programs, as well as any useful utilities to the Favorites folder "Computer & Network Maintenance". Do not move the Norton Antivirus program group to any sub-folder (causes problems).
- Access any hardware firewall, router, access point, or other network devices, create favorites for them in "Computer & Network Maintenance" and make any security setting changes needed to protect the computer and home network.
- Install and configure Instant Messaging (Trillian Basic/Pro, AIM, YahooIM, MSN Messenger, ICQ, etc.) if needed.
- Plug in any additional peripherals (printers, etc.) and install and configure any other user-specified applications or devices. Always check for the latest software versions and hardware/firmware updates from the vendor’s website.
- Install the latest version of IBM Rescue & Recovery (for automated computer backup) and create initial Base Backup. Program is accessed by either pressing F11 when starting the computer (desktop PC), or pressing the blue IBM Access key at any time (ThinkPad), or running the program from its icon in the Computer and Network Maintenance favorites folder. Set automated backups to run weekly (this schedule can be adjusted).
- If redundant backup is required, setup a Maxtor One Touch external hard drive with Dantz Retrospect Express (optionally upgrade to Retrospect Professional, which includes open file support). Alternatively, purchase a 2nd hard drive (same brand/size as the C: drive), install it, and use redundant backup software: Rapid Restore Pro and enable 2nd hard drive support (note, this product will replace or render useless any other hidden partitions on the original hard drive, including system factory restore partitions).
- Orient user to the new PC, especially the computer maintenance instructions, stressing that Windows & Office software must be kept up-to-date (as well as any other software), IBM programs and drivers must be kept up-to-date, and protection programs must be kept in place and new versions purchased annually.
- User must leave PC powered on (and logged on) in order for Windows Update to install critical updates automatically. Other updates must be obtained by running Windows Update manually and selecting the Custom Update procedure.
- User must be aware of the “trusted” computing resources (Microsoft, computer manufacturer, Norton Antivirus, Zone Labs Security, Ad-Aware, Spybot S&D, Pest Patrol) and be wary of any other sources for computer security or update (including 3rd party applications such as Adobe.com who will offer ‘enhancement’ software packages in addition to their core update.
|
 |
Why Bother? |
|
Today, the internet and all computing tasks are stuck with a high level of risk. Comptuer viruses, hackers and crackers, spyware, ad-ware, malwae, and cheap software are everywhere, and the money you just spend on a new computer can be wasted if your computer is rendered non-functional by any of these threats.
Businesses routinely consider the initial purchase price of a computer as a small fraction of the total cost of ownership. Keeping computers working consumes a significant portion of their IT budgets. For small businesses, home offices, and personal users, you don't have an "IT department" to turn to when your system stops working. And, you likely have neither the expertise to do it yourself, nor the money needed to pay an expert to do it for you. So it makes sense to spend some time up-front to protect your system from threats.
|
|
