Hardware And Network Servicing

Level III
Nefas Silk TVET College
Operation Sheet
Unit of Competence: Monitor and Administer System and Network
Security
Module Title: Monitoring and Administering System and Network
Security
MODULE CODE: EIS HNS3 M04 0322

MODULE DESCRIPTION : This module covers the knowledge skill and attitude
required to monitor and administer security functions of a system.
 Operation Sheet
LO 1: Ensure user accounts are
controlled
Modifying default user settings to confirm security policy

Security policies in Windows 10 are a set of rules and settings that determine the level
of security for a computer or network. These policies are used to define and enforce
security measures such as password requirements, user account controls, firewall
settings, and more.

To access and configure security policies in Windows 10, you can use the Local
Security Policy Editor. Here are the steps to access it:

1. Press the Windows key + R to open the Run dialog box.

2. Type "secpol.msc" and press Enter.
3. The Local Security Policy Editor window will open.

From there, you can explore various security policy settings and configure them based
on your requirements.

Alternative way

Modifying default user settings in Windows 10 to confirm security policy involves making
changes to the Group Policy settings. Here are the steps to modify default user settings:

1. Press the Windows key + R to open the Run dialog box.

2. Type "gpedit.msc" and press Enter to open the Local Group Policy Editor.
3. Navigate to the following path: Computer Configuration -> Windows Settings ->
Security Settings -> Account Policies -> Password Policy.
4. Double-click on each policy setting to modify it according to your security
requirements.
5. Once you have made the necessary changes, close the Local Group Policy
Editor.

2. Modifying Default User Settings:

 Click the Windows Start button.

 Select "Settings" (gear icon).
 Go to "Accounts."
 Click on "Family & other users" on the left.
  Under "Other users," click on the user you want to modify.
 Click "Change account type."
 Choose between "Administrator" or "Standard user."
 Click "OK."

Displaying legal notices at logon

Displaying legal notices at logon is a feature that allows system administrators to

display a message to users before they log in to a computer or network. This message
can include legal disclaimers, warnings, or other important information that users need
to be aware of before accessing the system.

To display a legal notice at logon on a Windows computer, follow these steps:

1. Open the Local Security Policy editor by typing "secpol.msc" in the Start menu
search box and pressing Enter.

2. In the left pane, navigate to Local Policies > Security Options.

3. In the right pane, scroll down to the "Interactive logon: Message text for users
attempting to log on" option and double-click it.

4. In the "Local Security Setting" tab, enter the text of the legal notice you want to
display in the "Explain text box" field.

5. Click OK to save the changes.

Another alternative way in order to inter Local security policy

1. Control panel
2. System and security
3. Administrative Tools
4. Local Security Policies

Using utilities to check strength of passwords and complexity

Using utilities to check the strength of passwords and complexity is a common practice
in cybersecurity. Passwords are the first line of defense against unauthorized access to
sensitive information, and it is essential to ensure that they are strong and complex
enough to prevent brute-force attacks.

There are several utilities available that can help you check the strength and complexity
of passwords. Some popular ones include:

1. Password Checker: This is a simple online tool that checks the strength of
passwords based on their length, complexity, and uniqueness.

2. Password Meter: This is another online tool that provides a score for the strength
of passwords based on factors such as length, complexity, and randomness.

In Windows 10, you can use the built-in Local Security Policy utility to check the
strength of passwords and enforce complexity requirements. Here's how you can
access and configure it:

1. Press the Windows key + R to open the Run dialog box.

2. Type "secpol.msc" and press Enter to open the Local Security Policy utility.

To configure password complexity requirements:

1. In the Local Security Policy utility, navigate to "Account Policies" > "Password
Policy".
2. Double-click on "Password must meet complexity requirements".
3. Enable the checkbox if it's not already checked.
4. Configure the complexity requirements according to your needs (e.g., minimum
password length, complexity rules).

Reviewing password procedures

To configure a password policy with the specified settings in a Windows environment,
you can use the Local Group Policy Editor. Here are the steps to configure the
password policy on a Windows machine:
1. Open Local Group Policy Editor:
 Press "Windows + R" to open the Run dialog.
 Type "gpedit.msc" and press Enter to open the Local Group Policy Editor.
2. Configure the Password Policy:
 In the Local Group Policy Editor, navigate to "Computer Configuration" >
"Windows Settings" > "Security Settings" > "Account Policies" > "Password
Policy."
3. Set the Minimum Password Length:
 Double-click on "Minimum password length."
  Set the value to " 8" characters.
 Click "OK" to save the setting.
4. Enforce Password History:
 Double-click on "Enforce password history."
 Set the value to "5" passwords.
 Click "OK" to save the setting.
5. Set the Maximum Password Age:
 Double-click on "Maximum password age."
 Set the value to "90" days.
 Click "OK" to save the setting.
6. Configure Account Lockout Threshold:
 In the Local Group Policy Editor, navigate to "Computer Configuration" >
"Windows Settings" > "Security Settings" > "Account Policies" > "Account
Lockout Policy."
7. Set the Account Lockout Threshold:
 Double-click on "Account lockout threshold."
 Set the value to "3" invalid login attempts.
 Click "OK" to save the setting.
8. Set the Account Lockout Duration:
 Double-click on "Account lockout duration."
 Set the value to "30" minutes.
 Click "OK" to save the setting.
9. Close the Local Group Policy Editor.
Once you've configured these settings, the password policy will take effect on the
local machine. Users will be required to create passwords with a minimum length of
8 characters, remember the last 5 passwords, and change their passwords every 90
days. If a user enters an incorrect password 3 times, their account will be locked for
30 minutes.

Identifying security gaps and taking action

Identifying security gaps and taking action in Windows 10 involves implementing various
security measures to protect your system from potential threats. Here are some key
steps you can take:

1. Keep your system up to date:

Open Windows Security:

Press the Windows key + I to open the Settings menu.

Click on "Update & Security."

In the left pane, select "Windows Security."

 Enable Real-Time Protection:

If real-time protection is not enabled, click on "Virus & threat protection."

Under the "Virus & threat protection settings" section, you should see "Manage
settings." Click on it.

Toggle the switch to turn on "Real-time protection."

Update Definitions:

In the same "Virus & threat protection" settings, click on "Virus & threat protection
updates."

Click on "Check for updates" to make sure your virus definitions are up to date.

2. Enable Windows Firewall:

Activate the Windows Firewall to monitor and control incoming and outgoing
network traffic. This helps protect your system from unauthorized access.

Enabling the Windows Firewall in Windows 10 is a straightforward process. Here are

the steps:

Open the Settings menu:

 Press the Windows key + I to open the Settings menu.

Go to "Update & Security":

 Click on "Update & Security" in the Settings menu.

Access "Windows Security":

 In the Update & Security section, you should see "Windows Security" in
the left-hand pane. Click on it.

Open Firewall & Network Protection:

 In the Windows Security window, select "Firewall & network protection."

Check Firewall Status:

 You will see the status of your firewall (On or Off) for different network
profiles (such as Public, Private, and Domain). If it's off, you can turn it on.

Enable Windows Firewall:

 Click on the network profile for which you want to enable the firewall (e.g.,
"Public network settings" or "Private network settings").

 Toggle the switch to turn on the Windows Defender Firewall.

 Close the Settings:

 Once you've enabled the firewall, you can close the Settings window.