
96 MetaFrame Solutions Guide
Have at least one commercial virus-detection program in use and regularly check
your file servers for viruses. If possible, make virus-detection software available to
your users.
Other ways to protect against computer viruses include the following:
K
Set file permissions to make all applications available on network servers and
workstations Read and Execute only, preventing them from being replaced by
viruses.
K
Before putting a new application or file on the network, put it on a computer
not attached to the network and check it with your virus detection software.
Log on to this computer using a Guest account so that the program being
examined cannot modify any important files.
K
Regularly use a Windows NT-compatible virus scanner. Consider using the at
command to periodically run the virus scanning program; for example, late at
night when no users are logged on.
K
NEVER LEAVE A DISKETTE IN THE DISKETTE DRIVE OF YOUR
SERVER. If the system is rebooted (for example, because of a power failure),
the system will attempt to boot from diskette and become infected.
K
Regularly back up the files on your file servers (and workstations, if possible)
so that damage is minimized if a virus attack does occur.
Auditing System Activity
You can specify that an audit entry be written to the Event Log whenever certain
actions are performed or files are accessed. The audit entry shows the action
performed, the user who performed it, and the date and time of the action. You
can audit both successful and failed attempts at actions, so the audit trail can show
both who actually performed actions on the network and who tried to perform
actions that are not permitted.
Event Viewer log entries for logon events now include the computer name
where the logon attempt originated.
The following table lists the categories of events you can choose to audit and what
events are covered by each category. For each of the categories listed below, you
can choose whether to audit only successful actions in that category, failed
attempts to perform actions in that category, both, or neither.
Note
Comentarios a estos manuales