Vista: Enabling and Disabling User Account Control (UAC)

Note that disabling UAC means you are running with the same execution model as XP. You loose protection from elevated privlege attacks, virtualisation which protects your file system and the ability to be able to legal elevate privileges if required through a Vista token.

So if you need to for a particular purpose such as installing some "trusted" software that will NOT work with UAC switched on, then do so, but after the installation swich it back on.

UAC is configured via the Local Security Policy tool or via the control panel

Local Policy Tool
1) Launch a cmd prompt
2) type secpol.msc
3) Select Local Polices
4) Scroll down to User Account Control: Admin Approval Mode for the Built-in Administrator
5) Enable or Disable

Control Panel
1) Launch Control Panel
2) Select Security
3) Select Security Center
4) Under Other Security Settings you can enable and disable User Account Control

Remember that UAC stops things accessing as administrator without your consent. Its something that can protect you and its something that can annoy. Control UAC rather then just switch it off for good.

Disable Floppy Disk Drives in Windows

To disable the floppy in Windows, Just open regedit and browse to this Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Flpydisk

You can change the "Start" type to one of the following:

Switch this value to 4, and Floppy Disk is disabled.

Setting Read Only for USB Storage devices

This feature provides the ability to set a registry key that will prevent write operations to USB block storage devices, such as memory sticks. When this registry key is enabled, the devices function only as read-only devices. You can implement this setting as part of a security strategy to prevent users from transporting data using these devices.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control \StorageDevicePolicies
WriteProtect
0 - Disabled
1 - Enabled

Free Antispyware software

Ad-Aware Personal provides advanced protection from known data-mining, aggressive advertising, Trojans, dialers, malware, browser hijackers, and tracking components. This software is downloadable free of charge.

Please visit the Lavasoft website for more information :-

http://www.lavasoft.de/software/adaware/

Free Antivirus Software for your home computer

No excuse for not having Antivirus as you can use a completely free version of AVG.

AVG Free Edition is available free-of-charge to home users! AVG Free Edition is for private, non-commercial, single home computer use only. Use of AVG Free Edition within any organization or for commercial purposes is strictly prohibited.

AVG Free Edition has the following limitations:

• AVG Free Edition cannot be installed on server operating systems (such as Windows Server 2003), nor can it be used for the scanning of network drives.
• Scheduling options in the AVG Free Edition are very limited (only one scheduled update per day, one scheduled scan per day etc.).
• AVG Free Edition receives updates via a lower priority service. Priority updating via ultra reliable Akamai servers is only available for purchased products.
• AVG Free Edition does not offer advanced testing options, such as automatic healing, password-protected archives reporting, adjustment of scan process priority and many others.
• AVG Free Edition has no technical support!

Please visit for more information and to download AVG Antivirus Free Edition :-http://www.grisoft.com

Disable USB Drives

It is easy to lock a machine down, disable the floppy, and cdrom in the bios. Many times when you try to disable USB - it disables it entirely.This can be a real pain on newer laptops or systems that don't even have a PS2 interface for the mouse or keyboard. There is a simple registry change that will keep the USB storage drivers from starting when the system boots. Keeps people from walking up to a PC and copying data off with a USB key, but allows you to keep your scanner, keyboard, and mouse working.As always - back your system up before messing around in the registry.

Just open regedit and browse to this

key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

Notice the value 'Start'

Switch this value to 4, and USB storage devices are disabled.

Switch this value to 3, and USB storage devices are enabled.