Web Hosting Reviews & Ratings

May 27, 2009

Three Windows Security Considerations for Business Users

The combination of an ailing economy and highly competitive business landscape has forced both the large enterprise and small business to eliminate costs in virtually every area deemed as unnecessary.  However, several major companies have failed to make the necessary adjustments at the most basic level: security.  Windows is the preferred choice in the business world and while additional security mechanisms are often needed, the natural design of this system can help companies save big time on security solutions.

Strong Passwords

You would be surprised at the number of organizations that still assign weak passwords to secure the most confidential information.  Because a weak password can be easily guessed with the right set of tools, even using one for a Windows administrative account should be viewed as unacceptable.  Security experts recommend the use of a password generator because it has the ability to create strong and unusual passwords.  Most of these solutions are affordable and  specifically designed for the Windows environment, thus finding one that supports your operating system will be convenient.  Although password generators typically produce passwords that are difficult to remember, most find that it is worth the hassle to protect mission-critical data.

Updates Management

One of the biggest causes of security breaches is the lack of security updates.  There are many reasons why companies neglect system updates.  Some fear that the systems will be damaged during patching while others claim that the lack of time and resources is the main cause.  The fact remains that failing to perform critical updates is like asking for a security breach to occur.  When business-critical operations are involved, is it essential that an organization's IT team tests patches before deploying them onto the system.  A sound patch or update management strategy should encompass constant monitoring for security bulletins and updates, determining risk levels, testing the update, deploying the update and checking to ensure a successful deployment.

There are a number of third-party applications that work well as patch management solutions.

For smaller companies or those working on a tight budget, security experts recommend facilitating update management with Microsoft WSUS (Windows Server Update Services), a handy tool that is available for a free download.

Policy Group Lockdown

Microsoft Active Directory has a powerful mechanism that enables central management and security through group policy.  With group policy, administrators can configure numerous settings that can be applied to workstations and servers alike.  Though it is only used sparingly in many business environments, group policy is another effective way to ensure security within an organization.  When looking to enhance security through group policy, it is critical that all users follow these simple rules:

- Take ownership of all changes made

- Never deploy a configuration they do not comprehend and document

- Never make a security adjustment without thorough testing in the appropriate test environment

- Understand how polices are to be backed up and restored

In the end, security is a game of balance where an organization must keep the bad guys out while not interfering with the company's assets in the process.  While there are many more areas that need to be considered, these keys are essential to Windows security and certainly worth consideration.

Popular Links

Tags: passwords,  password generator,  group policy,  WSUS,  Windows security,  security updates,  security