|
|
 |
Patching Your Computer
Method A (Windows 2000, Windows XP, Windows 2003 Server)
Method B (Windows 9x, Windows NT 4.0, Windows 2000, Windows XP, Windows 2003 Server)
To determine if your computer is fully patched for remote access and gain access to the college's network through VPN access, your computer must be a Windows-based machine with an anti-virus software program installed (preferably McAfee). In addition, you must prove that your machine is up-to-date in regards to Microsoft Windows critical patches, anti-virus software is running current virus DAT files and search engine, and your machine is not currently infected. Please use one of the methods below to do this.
If your remote computer does not have Internet access other than the college dial up you will then need to download Method A in a computer lab and save it to a CD to take home. You will also need to download the adjoining cab file for take home as well. This cab file will need to be placed into the install folder of the MBSA tool. Click here for the link for download of this file.
*** Since Windows 95/98 and Windows NT 4.0 are no longer supported by Microsoft, we recommend users of these systems to upgrade to either Windows 2000 Professional or Windows XP Professional. ***
Method A: Microsoft Baseline Security Analyzer (MBSA) Tool
Operating systems: Windows 2000, Windows XP, Windows 2003 Server
- Download and install the Microsoft Baseline Security Analyzer (MBSA) Tool. Click here to go to the MBSA site.
Read what it tells you about the MBSA Tool. See the button titled "Continue" for downloading instructions.
- If you do not have Internet access on the computer you are going to scan, you will also need to download the security cab file that contains the information about the necessary patches. You will need to put this file into the folder where you have installed the MBSA tool. You can read about this in the Q & A section for the MBSA tool. See the Question and Answer for "Q- How can I download the files necessary to run a scan if my proxy server requires authentication-". Click here to download the file.
- Go to the folder where you saved the mbsasetup.msi file and open it. Follow the instructions on screen for install.
- After it is installed run it and select "Scan a computer," then select "Start scan." This will scan the local computer it is installed on and then it will produce a report.
- Read the report. It will tell you about security issues on your computer. If your computer is missing patches it will tell you which ones. If you receive warnings about a security update file version that is Greater than what is expected then this is ok. If it says that the file version is less than what is expected then you need to update.
- You can Print this report (click print in the left column) or you can Copy and paste into a Microsoft Word document. You can then save the document to CD or disk and print it out in the computer lab.
- Clearly write or type your name on the report and bring report to Room 1D35 in Swearingen. We will collect and review these reports as is convenient. If your report is good then your remote access will be enabled. Be sure to include your username on the report otherwise we will not know what user account to enable remote access for. We will email you at Your-Username@engr.sc.edu to report your remote access status after review.
- If you have not already done so install anti-virus software and update it to the latest version for detecting viruses. Produce a scan report from your anti-virus software showing that your computer is virus and worm free and include it with your patch report produced above. You may need to use one of the print methods above to produce this report. See the section about Anti-Virus Software at the bottom of this document if you require additional information about anti-virus software.
Method B: Internet Access
STEP 1: Verify Critical Patches Through Windows Update
Operating Systems: Windows 9x, Windows NT 4.0, Windows 2000, Windows XP (w/o SP2 installed), Windows 2003 Server
If you already have access to the Internet, you can use Windows Update.
- Open Microsoft Internet Explorer. On the tool bar select Tools then select Windows Update. Select Scan for updates.
- If there are no critical updates available for your computer it will tell you; otherwise you must install ALL critical updates.
- Once all critical updates are installed there will be zero critical updates and services packs listed. On the left it will say "Critical Updates and Service Packs (0)." You may need to return to Windows Update multiple times and scan multiple times before you can be sure there are zero updates.
- Once all updates are applied print it so that we can verify it.
- Hold down the Alt key then press the PrtScn key to copy a screen image onto the clipboard. Then paste into a Microsoft Word, or Wordpad document, which will be referred to as VPN document. You will add other screenshots to this document so make sure you save it.
Operating Systems: Windows XP w/ SP2 installed
If you already have access to the Internet, you can use Windows Update.
- Open Microsoft Internet Explorer. On the tool bar select Tools then select Windows Update. Select Express Install.
- If there are no high priority updates available for your computer it will tell you; otherwise you must install ALL high priority updates.
- Once all high priority updates are installed there will be zero high priority updates and services packs listed. In the middle of the screen under "High Priority Updates" you will see "No updates available." You may need to return to Windows Update multiple times and scan multiple times before you can be sure there are zero updates.
- Once all updates are applied print it so that we can verify it.
- Hold down the Alt key then press the PrtScn key to copy a screen image onto the clip board. Then paste into a Microsoft Word, or Wordpad document, which will be referred to as VPN document. You will add other screenshots to this document so make sure you save it.
STEP 2: Update Anti-Virus Software (McAfee)
Operating Systems: Windows 9x, Windows NT 4.0, Windows 2000, Windows XP, Windows 2003 Server
- Locate the McAfee VirusScan shield icon in the system tray. Right-click on this icon and select "Update Now."
- A popup window will open and establish a connection to the McAfee server to check for updates.
- You may have to run the update several times before you see the messages stating "Product(s) running latest Engine" and "Product(s) running latest DATs."
- Once McAfee is up-to-date, right-click on the VirusScan shield in the system tray and select About VirusScan.
- Hold down the Alt key and then press the PrtScn key to copy a screen image onto the clip board. Paste this image into the VPN document and save the file so you can update it when needed.
STEP 3: Scan Your Computer For Infection (McAfee)
Operating Systems: Windows 9x, Windows NT 4.0, Windows 2000, Windows XP, Windows 2003 Server
- Locate the McAfee VirusScan shield icon in the system tray. Right-click on this icon and select On-Demand Scan.
- A popup window will open for you to select what to scan. You will need to scan all your fixed hard drives. Please note that this step may take a while.
- Once McAfee has completed the computer scan, you may take an screen shot of the completed scan task or included the activity log with your report.
- If you choose to create a screen shot, be sure to hold down the Alt key and then press the PrtScn key to copy a screen image onto the clip board. Paste this image into the VPN document and save the file.
- An alternative to the screenshot is the activtity log. To access this log, open the VirusScan Console. From the console, navigate to File and then Activity Log.
- You may print the activity log or include it with the VPN document.
STEP 4: Completing the VPN Report
Operating Systems: Windows 9x, Windows NT 4.0, Windows 2000, Windows XP, Windows 2003 Server
- To gain remote access privileges, you will need to turn in the document created above containing the three (3) screenshots that were captured previously. They include proving the following scenarios:
Windows Update shows no critical/high importance updates available, anti-virus software is up-to-date regarding DAT and search engine files, and your computer is currently infection free.
- Clearly write or type your name on the report and turn the report into ITS staff by either dropping off a printed, complete report at Room 1D35 in Swearingen or e-mailing the complete report to helpdesk at engr.sc.edu. We will collect and review these reports as is convenient. If your report includes all necessary information, then your remote access will be enabled. Be sure to include your username on the report otherwise we will not know what user account to enable remote access for.
Additional Information for securing your computer
- ANTI-VIRUS SOFTWARE: We highly recommend using anti-virus software. McAfee can be obtained from USC's Computer Services Division free of charge for all USC faculty, staff, and students. Configure your anti-virus software to update itself daily.
- WINDOWS UPDATE: We highly recommend configuring your Windows computers to automatically download and install critical patches. You can read a short and EXCELLENT tutorial on how to protect your computer in 3 easy steps by clicking here.
- ASK MICROSOFT: Read what Microsoft has to say about protecting your home computer. Since they wrote the software, they should to know.
|
|
