The temporary Cure: The Enterprise intranet client Antivirus

What are we going to do? Always be passive to clean up the scene? Always for these anti-virus software also can not find the poison of the Hate Guy full workshop run? Now teach you to work from the source, from the beginning of the client's anti-virus strategy to do a good job, so that you can sit back and relax.

Format a disk partition using the NTFS format

Many network management for ghost convenience, like to format the system disk into fat format. In fact, the backup and recovery of NTFS-formatted partitions is supported from Ghost8.0, and the classic version 8.3 Ghost is more perfect for NTFS-formatted partitions, so there is no need to worry about system backup and recovery issues.

The NTFS format is the new partition format introduced by the Microsoft NT series system, provides better performance than FAT, and supports rights management, which is also the main reason for the recommended NTFS format, because some of the following applications are based on NTFS permissions.

In other words, after all, NTFS is the product of fat development years later, in the technical update, the performance of course will be better, I believe that Microsoft is right. It is strongly recommended that you format the system disk in NTFS format when you install the system, and if the system is already installed, you can convert it using the Convert command (Figure 1).

Figure 1

Second, the use of Proxy server Internet

If let the intranet all computers are through switches, firewalls, routers and other equipment directly to the Internet, the risk is very large, and the client a lot, the management of the trouble, although you can set up in the firewall, switch on the corresponding rules, but also can not guarantee hundred secret.

Therefore, in the intranet to add a proxy server is undoubtedly the best solution, in the switch or router and other devices set up to allow only proxy server network, so that the management is more convenient. Another proxy server built using Microsoft ISA to do, not only acting as a proxy for the role of software firewall, set the appropriate filtering conditions are much more convenient. and management of the time only need to manage the proxy server This computer, the other clients basically do not have to pipe (Figure 2).

Figure 2

Iii. disabling of the Guest account

The Guest account is often a "hotbed" of backdoor procedures, and there are many articles on the web that explain how to get administrator privileges through the Guest account, so it is absolutely no mercy to play the security First battle and disable the Guest account.

Go to control Panel → user account, click Guest Account, and then click Disable Guest account to disable the Guest account (Figure 3).

Figure 3

Four, the default account name

In addition to disabling the Guest account, if you want to make some backdoor programs that want to rely on the default account of the system completely out of effect, you can rename the system's default administrator account and guest account so that intruders cannot find the north.

Run the Gpedit.msc program to open the Group Policy Editor, navigate to the Computer configuration →windows settings → security settings → Local policies → security options, and on the right, find the "account: Rename administrator Account" and "Account: Rename guest Account", double-click Open, Change the two accounts to an easily guessed account name (Figure 4).

Figure 4