Completely Automated Protection?

[SuperG03]

Hi all,

I have a question. I want to know what is the best software / settings to make a computer system safe and secure with little to no knowledge / interaction by the end user. I want to have a computer for my parents that will keep it safe without them having to do anything. They just want to get on the internet, email, and use MS Word. They are not very technically savvy. Basically, I want to install Win XP on the system and then have everything security wise taken care for them. They will be using a computer connected directly to cable/dsl connection (no NAT router/firewall). Basically I want to know how to be able to do the following without them having to do anything. 1) Automatically update and install critical updates. 2) Have a firewall running, but that does not require constant yes / no questions to access the net (like zone alarm does). 3) Have a anti virus software that will actively protect the computer and will auto download and install updates to the virus definition files. 4) Have spyware / trojan activity be monitored and deleted when detected. Is all this possible? Is there anything else I am forgetting as far as safety and security go? I would appreciate any suggestions on any of the above. Thanks.

SuperG03

 

[Schadenfroh]

use windows xp built in crap and set it all to auto, use adaware pro

 

[Smilin]

Originally posted by: Schadenfroh
use windows xp built in crap and set it all to auto, use adaware pro

Yep.

 

[EagleKeeper]

You seem to have all the requirements covered.

Even if Window updates are installed automatically, the system will still need to be rebooted to activate them.

Zone Alarm is a set and forget it app. Only need to touch it is when a new app has been installed.


We use AVG at home. Free and has automatic updates w/ installation.

I do not know if spyware can be setup to automatically remove.
Adware and/or Spybot can be setup to run a startup; you will have to determine if they will continue on automatic.

 

[SuperG03]

Originally posted by: EagleKeeper
You seem to have all the requirements covered.

Even if Window updates are installed automatically, the system will still need to be rebooted to activate them.

Zone Alarm is a set and forget it app. Only need to touch it is when a new app has been installed.


We use AVG at home. Free and has automatic updates w/ installation.

I do not know if spyware can be setup to automatically remove.
Adware and/or Spybot can be setup to run a startup; you will have to determine if they will continue on automatic.

First off, thanks to all for thier input

The reboot thing is understandable and not a big deal. So does that mean you can set windows to automatically download AND install them?

So basically with Zone Alarm you are saying I should just start all the programs they will need, and allow those programs access from zone alarm and then after that just tell them to hit NO if they ever see anything else (they will probably not download any new software on their own)? That sounds pretty good.

So AVG is a good virus scanner, that will automatically (in the background) download and install all updates? And will it actively protect the computer? (i.e. like mcafee vshield or whatever, etc.)

So Ad Aware Pro will automatically download and install new reference files, and scan on a schedule? And it will also actively monitor?

Thanks again.

SuperG03

 

[Barnaby W. Füi]

Give them a user account without admin privelages, and make them use something other than IE.

 

[notfred]

Buy them a macintosh. There is no spyware written for it, there are no viruses that run on it, it has a built-in firewall, it will automatiucally download updates, the default browsers has built-in popup blocking, etc.

 

[EagleKeeper]

Originally posted by: SuperG03

First off, thanks to all for thier input

The reboot thing is understandable and not a big deal. So does that mean you can set windows to automatically download AND install them?

So basically with Zone Alarm you are saying I should just start all the programs they will need, and allow those programs access from zone alarm and then after that just tell them to hit NO if they ever see anything else (they will probably not download any new software on their own)? That sounds pretty good.

So AVG is a good virus scanner, that will automatically (in the background) download and install all updates? And will it actively protect the computer? (i.e. like mcafee vshield or whatever, etc.)

So Ad Aware Pro will automatically download and install new reference files, and scan on a schedule? And it will also actively monitor?

Thanks again.

SuperG03

I know that Windows can detect the updates, it may be able to be configured to download/instll them. Of this I am not sure. I personally would not want updates automatically installed. MS is not perfect.

With respect to ZoneAlarm what you are understanding is correct. If they ever have to say know, they should let you know, so you can check the ZoneAlarm log.

AVG seems to protect all our systems and I do not have to do anything to keep it current. Set to check and load updates every day. It has active e-mail and file detection running in the Systray like Nortron or McAfee

I do not know about AdAware/Spybot automatica updates. You will have to look for those answers elsewhere.

As BingBongWongFooey stated above, try to get them to use a different browser. MS is supposed to come out this year with a safer browser, however, do not count on it.


When I first setup a system for my parents, I was able to train them easily on what not to do.
Whenever I visited, I would then run some checks on the system looking for problems and updates.

They were never crippled by anything or needed something that I could either not advise over the phone or wait until a visit.

 

[EagleKeeper]

Originally posted by: notfred
Buy them a macintosh. There is no spyware written for it, there are no viruses that run on it, it has a built-in firewall, it will automatiucally download updates, the default browsers has built-in popup blocking, etc.

Macs will do, however, they may want to follow the crowd.

 

[SuperG03]

Originally posted by: notfred
Buy them a macintosh. There is no spyware written for it, there are no viruses that run on it, it has a built-in firewall, it will automatiucally download updates, the default browsers has built-in popup blocking, etc.

Well that is out of the question. The computer is already there, not going to buy another.

Originally posted by: BingBongWongFooey
Give them a user account without admin privelages, and make them use something other than IE.

Well, wouldn't an account without admin privelages not allow them to save word documents, email, etc.? I thought there were only like two accounts. Admin: with everything and Guest: with extremely limited privalages, especially like not being able to save data.

As for not using IE, I am not sure if I can do that either. Some of the sites they visit (especially for business), the page says required IE, so I don't see how I can get around that.


TO ALL;

I think for now so far I am looking at:

1) Setting up windows to auto download the updates, and I will explain to them, that if they see the globe in the corner, they need to follow the instructions to install the updates.
2) Use ZoneAlarm with all major programs pre configured.
3) Use AVG virus software (You said it is FREE for home personal use???)
4) Install Lavasoft Adaware and Spybot S&D, and teach them how to twice a month or so download the new updates for them and run them.
5) Install Spyware Blaster (To prevent hijacking cookies and browser files).

I think that looks pretty complete. Does anyone see any major problems with the above? Any other recomendations/suggestions? Thanks again.

SuperG03

 

[Barnaby W. Füi]

Originally posted by: SuperG03

Originally posted by: BingBongWongFooey
Give them a user account without admin privelages, and make them use something other than IE.

Well, wouldn't an account without admin privelages not allow them to save word documents, email, etc.? I thought there were only like two accounts. Admin: with everything and Guest: with extremely limited privalages, especially like not being able to save data.

I don't know, but I doubt it's like that, because that would be pretty stupid IMO.

As for not using IE, I am not sure if I can do that either. Some of the sites they visit (especially for business), the page says required IE, so I don't see how I can get around that.

Tell them the pros and cons of each and let them take the matter into their own hands. The upside of using IE is that braindead websites will still work. The downside is that you'll no doubt be taken advantage of at some point.

 

[silent tone]

Originally posted by: BingBongWongFooey

Originally posted by: SuperG03

Originally posted by: BingBongWongFooey
Give them a user account without admin privelages, and make them use something other than IE.

Well, wouldn't an account without admin privelages not allow them to save word documents, email, etc.? I thought there were only like two accounts. Admin: with everything and Guest: with extremely limited privalages, especially like not being able to save data.

I don't know, but I doubt it's like that, because that would be pretty stupid IMO.

It's not like that. XP home users(power users) can't write to the windows directory, other users profiles, large sections of the registry, etc.
This is an excellent idea, however many programs feel entitled to have read/write access all over places they have no business in. Regardless, this is how I run on my personal system.

Automatic updates can be set to automatically download and install. It also only uses idle bandwidth, so they won't even notice. In the rare event a patch breaks something they actually use, it can be uninstalled via Add/remove programs or a system restore point.