Windows Vista & 2008 (R1 and prior) Security Checklist - click here for XP version

This Checklist will walk you through updating and locking down Windows Vista to ensure the tightest security on your computer, without causing your pc to stop working as normal. These steps were created and tested by ASG. By using the Windows Vista & 2008 Security Checklist, your computer will be more effective at preventing attacks on your computer.

1. Install the latest Service Pack for Windows Vista or 2008 – even if you have automatic updates turned on. You might be missing big updates that can leave a huge hole in your computer.
   1. Check your Windows Service Pack – Right click on Computer and choose Properties. If you are not showing Service Pack 2,(click here for Picture) then you should install that first. We have made a link to the download. If you only need the English version click here: Service Pack 2 for English and if you need all languages Click here: Service Pack 2 with all languages. To install it, just run it after downloading it, and click install. It will automatically install itself after that.
      
2. Install the latest Updates for Windows Vista or 2008 – If you have automatic updates turned on. You might be missing big updates that can leave a huge hole in your computer.
1. Check for the latest Updates – Right click on Computer and choose Properties. Then click on Windows Update in the bottom left hand corner of the screen. Then if Windows finds updates for your computer, install the updates. Restart if needed and then check for more updates again to make sure no more updates are available. See a screen shot
   
3. Password Protect Windows Vista & 2008
   
1. Click here for Instructions on How to password protect Windows Vista
   
4. Secunia Personal Software Inspector – Completely Free 
1. Go to the Secunia Website - http://secunia.com/vulnerability_scanning/personal/ - and download Secunia PSI. Then install it. After installation Secunia PSI will scan your computer for all programs that you have installed. Then check each program for available updates. Then provide you a list with those updates and links to download the updates. After you install your updates, Secunia PSI will scan your pc again and tell you if your if any other updates are available. Secunia PSI is highly recommend for keeping all of your Programs such as MS Office, Adobe, Sun Java and more updated and Secure.
   
5. Disable Remote Control of Windows Vista & 2008
1. If you do not use Remote Desktop on your computer. Then it is best to make sure it’s turned off completely. Remote Desktop is a program you can use to log into your computer from another computer. Disabling Remote Desktop will keep people from logging into your computer, unless the person is sitting right at your computer and holding your computers mouse and keyboard.
2. To Disable Remote Desktop – Click Here for Instructions
   
6. User Account Control of Windows Vista & 2008
   
1. ASG Highly Recommends that you Enable User Account Control. User Account Control is a feature in Windows Vista that pops up and asks your permissions before Installing and Running files. User Account Control is vital for protecting your computer from Malware and other security threats. If you have Disabled User Account Control in past, ASG recommends you Re-Enable it. You should only disable User Account Control if you are having an issue with Installing a program on your computer. Then after your done installing that program turn User Account Control back on.
2. To Enable User Account Control - Click Here
   
3. To Disable User Account Control - Click Here
   
7.   User Rights Agreement Local Security Policy Setup for Windows Vista & 2008
   
1. Click here to go to User Rights Agreement Setup
   
8.  Security Options Local Security Policy Setup for Windows Vista & 2008
   
1. Click here to go to Security Options Setup
   

additional items - not required but recommend for added security

Step 1 - Install No Script for Firefox, Highly Recommend for Maximum Browser Security

Step 2 - Install McAfee Site Advisor, Displays a Site Rating in Both Internet Explorer and Firefox so you know what websites you should Avoid.

Step 3 - Install CCleaner -Run once a day for Maximum Protection. This Cleans all of your temp files and history from your Web Browsers and a lot of other Programs like Microsoft Office, eMule, Kazaa, Google Toolbar, Nero, Adobe Acrobat, WinRAR, WinAce, WinZip and more.

NOTE: ASG built this Security Setup for Windows Vista and Windows 2008 R1 and prior. The Security setup for Versions of 2008 R2 and newer will be added to the future security checklist for Windows 7 and Windows 2008 R2. You can use this setup to secure your computer running Windows 7 and Windows 2008 R2, but this setup might not have the correct steps or might not contain all of the best practices for your version of Windows.

NOTE: Windows Server 2008 R2 is consider to be a build of Windows 7 version. Therefore these instructions may not have the correct steps for locking down Windows 7 or Windows Server 2008 R2. A Security Checklist for those versions will be released soon. (maybe in 1-2 more months after testing is completed.)