Maintaining Windows Security

This page provides security information for Windows users. For general information on security measures and precautions, please refer to the Security Overview.

Automatically Checking for Security Updates (Windows XP)

ITS recommends that you check for updates at least once a week. For the latest updates, go to Windows Update or Microsoft Download Center. (In order to access the Windows Update link, you will need to use Internet Explorer.)

1. From the Start menu, select Control Panel.
2. Double-click Automatic Updates. The Automatic Updates window displays.
   Note: Make sure you are viewing your Control Panel in the Classic View, since the Category View will not let you see the Automatic Updates icon.
3. Verify that the Automatic (recommended) option is checked. If it is not, your computer's security definitions are already outdated.

Automatically Checking for Security Updates (Windows Vista)

1. From the Start menu, select Control Panel, and then Windows Update. The Windows Update window displays.
2. Verify the updates.

Note: The Windows Update screen will vary slightly depending on which edition (Home, Ultimate, or Enterprise) you are running.

Automatically Checking for Security Updates (Windows 7)

1. From the Start menu, select Control Panel.
2. In the Control Panel, choose System Security and then Windows Update. The Windows Update window displays.
3. Verify the updates.

Note: The Windows Update screen will vary slightly depending on which edition (Home, Ultimate, or Enterprise) you are running.

Before you connect your computer to the USC network, you should make sure your computer has the appropriate patches installed. See Windows Security Patches.

Testing Your Computer's Security

Microsoft Baseline Security Analyzer is a program that verifies that all of your computer updates are current and that there are no security flaws. ITS recommends only running the program on the computer that needs to be scanned.

Using a Firewall

The Windows operating system is designed to work within a networked environment. The Windows operating system has built-in, server-level services that cannot be turned off. To protect your computer, you must run a firewall.

Built-in Firewalls for Windows Vista and Windows 7

ITS recommends that users with computers running the Windows Vista and Windows 7 operating systems use the firewall that is built into these operating systems. See the Windows Security page for instructions on how to turn on the Windows firewall.

Sophos Firewall for Windows XP

ITS provides a version of Sophos Endpoint Security with an unsupported firewall for download from software.usc.edu. This unsupported firewall, intended for use primarily on Windows XP computers, must be configured by the owner of the computer.

Turning on the Firewall in Windows XP

1. From the Start menu, select Control Panel and then Windows Firewall.
2. Make sure On is selected.



Note: If On is not selected, your security definitions are already outdated, and you should download the most recent service pack available for your operating system at the Microsoft website.

3. Click OK.

Turning on the Firewall in Windows Vista

1. From the Start menu, select Settings and then Control Panel.
2. Double-click Windows Firewall.
3. Make the Windows Firewall screen says Windows Firewall is On.



Note: If On is not selected, your security definitions are already outdated, and you should download the most recent service pack available for your operating system at the Microsoft website.

4. To turn on the Windows Firewall:
   1. Choose Turn on Windows Firewall from the menu on the left side of the screen.
   2. Select On (recommended).
   3. Click OK.
5. Close the Windows Firewall screen when you are finished.

Turning on the Firewall in Windows 7

1. From the Start menu, select Control Panel
2. From the Control Panel, select System Security and then Windows Firewall.
3. Make sure Windows Firewall state is listed as On.
   

   

   Note: If On is not selected, your security definitions are already outdated, and you should download the most recent service pack available for your operating system at the Microsoft website.

4. To turn on the Windows Firewall:
   1. Choose Turn on Windows Firewall from the menu on the left side of the screen.
   2. Select Turn on Windows Firewall for both Home or work (private) network location settings and Public network location settings.
   3. Click OK.
5. Close the Windows Firewall screen when you are finished.

Additional Information

For detailed information on Windows Security, see the Microsoft TechNet or CERT website.

Getting Help

The ITS Customer Support Center provides support for software available on the software download page. For help with other programs, contact the software’s vendor or go to the vendor's website.

For questions, please contact the Customer Support Center at 213-740-5555 or send an email to consult@usc.edu.