Rule number seven: Set the motherboard's BIOS password.When connected to a LAN, users should not be permitted to install and run software. With access to the Internet, anyone can download potentially dangerous programs thus jeopardizing the whole LAN. Windows 2000 Server and 2003 Server have a powerful tool to manage user rights, the GPO (Group Policy Objects). With this, you can set up a policy to manage and secure your network. A multitude of rules can be defined: complexity of the password, screensaver, authorised applications to be run, auditing, and you name it.Because Group Policies can have a tremendous impact on users, any Group Policy implementation should be tested carefully before implementation. Rule number eight: Set up the Group Policy Objects rules.Being connected to the web brings a lot of benefits, speedy exchange of mails, plenty of information _ and also unwelcome content to employees. Risks are wasted time, network exposure to potential dangers and wasted bandwidth. To avoid massive downloads of software, music (mainly MP3) and video files (MPEG, AVI, MP4, WMV, MOV, WMA, etc.) through P2P, HTTP, FTP and email attachments, filtering must be implemented and be able to recognise content
Rule number nine: Use a content filtering software for HTTP, FTP and SMTP
If you go to some websites and register for some newsletters, updates, etc., the chances that you will receive Spam or unwanted mail are high. Anti-Spam software is becoming a necessity and should be installed to avoid wasted time and unwanted mail. Rule number ten: Use anti-Spam software.Above rules are arbitrary, they only reflect what I consider to be important points to secure PCs and networks. In fact the first question to answer is what to protect, how much am I prepared to spend to safeguard my data?Small and medium enterprises should decide how much freedom to give to their employees. How far should they trust them? The response depends on time and money available and the level of protection desired. Since you cannot have a 100 percent secure network, you have to choose your priorities. Louis Menthon was IT security manager of a life insurance company in Luxembourg and is now consultant for NetONE