Install Latest Service Pack
Once Windows XP is installed, the next step (before anything else, please) is to install the latest Service Packs. Service Pack 2 must be installed before you connect to the Internet as it contains the new Windows Firewall features. You should have the latest Service Pack either on a disk from Microsoft, or burned to a CD-R disk.
Once Service Pack 2 is installed, then you can safely connect to the Internet and install all necessary hot-fixes. Though you could select these manually, the easiest method to install these is to go to the Microsoft Windows update site, and allow it to do most of the work. Try Microsoft's Windows XP sites: http://www.microsoft.com/windowsxp/default.mspx or http://www.microsoft.com/security/bulletins/automaticupdates.mspx.
Generally Windows Update will begin by installing any missing Service Packs. Service Packs often are very large (the Service Pack 1 for Windows Server 2003 is about 350 MB in size). If you have a slow connection, you will certainly be forgiven if you choose to purchase the disk version (the cost is really just shipping and handling). However, even before getting the disk version, see if anyone has a copy you can use. Perhaps a friend with a fast Internet connection has already downloaded, or will be willing to download the Service Pack for you. Remember that Service Packs are cumulative--if you have Service Pack 2, then you don't need Service Pack 1. (Another place to check is any local, non-chain, computer stores. Most will provide a CD for free or for a nominal copy charge.)
The Windows XP Security Center
Windows XP Service Pack 2 installs an enhancement to Windows XP called the Windows Security Center (WSC). WSC is accessible through an icon in the Windows Control Panel. Once opened (Figure 15) the user can configure Internet options, automatic updates, and the Windows Firewall.
Figure 15-The
Internet Options are those options that we see when we select options in Internet Explorer. This is just another way to reach that functionality.
Automatic Updates tell Windows to check, on a schedule, with Microsoft to see if there are any updates or hot-fixes. If there are, then you can choose to have them installed automatically, or manually. Usually you would choose an update time when it is unlikely you will be using your computer.
Tip
To use Automatic Updates, your computer must be left running. There is a temptation to not close running applications (and there is no reason not to, usually). However some updates require that Windows be rebooted for the update to be completely installed, and in that case Windows will restart regardless of what programs are running.
Always, if you leave any applications running overnight, save your work when you leave your computer. If Windows restarts the computer, it will not tell the applications to save your work!
The most important WSP component is the Windows Firewall. Clicking on this will display the Windows Firewall settings (Figure 16).
Figure 16-Make sure that the firewall is turned on. For maximum security also check "Don't allow exceptions".
Insure a Firewall is running before going Online
Under ten minutes. That's average amount of time that a computer can be on the Internet before being attacked at least one time. That's not a very long time.
Firewalls come in two categories: hardware, and software. There is
no reason you cannot use both, if you have them. First, most of today's smaller
Configuring the Windows Firewall is easy. First, if you have not configured or changed anything, the defaults will provide satisfactory protection. If you have changed anything, the set the General tab's options to match those shown in Figure 16. On the Exceptions tab, then uncheck everything except for File and Printer Sharing, and Remote Assistance. You do not need to delete the other items, just make sure they are unchecked.
In the Windows Firewall's Advanced tab, are settings to specify which network connections are to be protected by the firewall, logging options, ICMP settings, and a button to reset the Windows Firewall to its default settings should you not want to do so manually. (Manual resetting allows you to note the current settings as you change them, so that they may be restored at a later time.)
tip
When we started installing Windows XP, I suggested disconnecting the network cable. Now, once Service Pack 2 is installed, the Windows Firewall is running and configured, you can connect to the Internet safely.
Hot-fixes
Once all Service Packs are installed, the Windows Firewall is operational, now it is safe to connect your computer to the network and the Internet. Once connected, next install any 'hot-fixes' that have been released by Microsoft since the latest Service Pack. Most hot-fixes are small, and the download times are not significant, though before starting the download (if you have a slow connection) you can check the size and defer installation to a later time.
I recommend installing all Service Packs and hot-fixes. These updates often constitute your first line of defense against malicious attacks from the Internet.
After installing the Windows Service Packs, and hot-fixes, check to see if any of the drivers that you installed need to be updated. If there are updates apply them. (Above, in the preparation stage, it is suggested that you get the latest drivers before you start.)
Enable Windows Update
The Windows Update service is a valuable tool in keeping your computer safe from security threats. As well, Windows Update will also install other updates that may improve performance or add functionality to Windows XP.
Windows Update is configured in the Control Panel's Windows Security Center. Click on Automatic Updates, and the Automatic Updates window (Figure 17) will be displayed.
Figure 17-The default for updates is early morning, and install the updates automatically.
Near the bottom of the Automatic Updates window is the link "Windows Update Web site". This will take you to the Microsoft site where there are tools to check what updates may be needed, and to install these updates.
Tip
I recommend, even if you just installed Windows XP from a brand new, hot off the presses CD, that you click the "Windows Update Web site" link.
Once you go to the web site, choose either Express Install (this will install all really important updates), or Custom Install (everything Express installs, and more.) The Windows Update service will prompt for each update as appropriate.