Hardening Windows 8.1

Revision as of 14:53, 29 January 2015

This page contains notes on how to harden Windows 8.1. The intent of these changes to the default OS install is to reduce overall exposure to attack, while still remaining usable for the majority of uses.

In particular, these tips apply to ITAR computers and GTA tablets.

Networking

Control Panel->Network and Sharing Center->Ethernet->Properties

• Client for Microsoft Networks: Used to access other shared resources on your local network running the File and Printer Sharing for Microsoft Networks protocol.
  • Required for mapping SMB network drives
• QOS Packet Scheduler: Used to provide traffic management on your network for applications that support the protocol.
• File and Printer Sharing for Microsoft Networks: Used to share your printer and files on your computer with other computers on your local network.
• Microsoft Network Adapter Multiplexor Protocol: provides the ability to load balance between two or more network cards.
• Microsoft LLDP Protocol Driver: Used to create the network map used in the Network browser and Networking and Sharing Centre.
• Link Layer Topology Discovery Mapper I/O Driver: Used to discover other computers connected to your local network.
• Link Layer Topology Responder: Used to identify your computer to other computers connected to your local network.
• Internet Protocol Version 6 (TCP/IPv6): A new version of the IPv4 protocol. Unless you are connected to an IPv6 network (most of you are not), you can safely disable this protocol.
  • Do not disable
• Internet Protocol Version 4 (TCP/IPv4): Primary network communication protocol.
  • Do not disable.

Resources Used

http://hardenwindows8forsecurity.com/Harden%20Windows%208.1%2064bit%20Home.html