Educating Users About Security

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

When distributing your service profiles, you should also inform users of their responsibilities in protecting the organization’s resources. Educate your users about potential threats and how to avoid them, including:

  • Enable a personal firewall (such as ICF in Windows XP).

  • Use strong passwords on their remote computers.

  • Never save passwords for any connection.

    To prevent users from saving their password for this connection, disable the Save Password check box on the Connection Manager client. For more information, see "Providing Advanced Customization" earlier in this chapter.

  • Lock their computers when they are not actively using them. They do this by password-protecting the screen saver or through the Ctrl-Alt-Delete dialog box.

  • Do not share VPN connections or run a VPN connection from an ICS host. Sharing the VPN connection allows all computers on the ICS network — using the VPN connection — to access your organization’s network and resources using the VPN connection’s credentials.