Setting up XP with NO Networking

suprageezer

New Member
Aug 27, 2005
778
0
0
Southern California
Changes I make to Windows XP
yes the formatting doesn't come out right here on Supramania

1 Print these instructions out

Goggle Black Viper and print out his Awesome Recommendations. One note, if you use

AOL make sure you leave Telnet service set to its default setting.

Disclaimer Must Read
First off as you’ll see I aint a master of sentence structure, but it get’s the

job done anyways. Keep in mind these instructions are to make your computer robust

against attacks while on the Internet with No anti-Virus and using the Windows

Firewall. Also these instructions are only for those who are NOT part of any network. You Must at least once a week manually check for Microsoft Security

Updates using the Custom Button when presented with it and install All Microsoft

Security Updates. I have been on the Internet 13 years with no Stinking Anti-Virus

and have been Virus free all of them. One thing I have found is Every single

computer I have ever cleaned had an anti-virus, but many that had none had no

viruses just windows glitches. Any networking with other computers or printers

makes it so you have to enable the same services that whackers know how to

exploit, so Do not use these instructions if you're part of any kind of network or

network printers I suggest keeping your computer lonely, and your printer

connected directly to your computer.

2 First lets make you computer look and feel like windows 98/95. We’ll adjust

the simple settings that will make you computer run smoother. This will enable me

to write the instructions for most users. I've found most users prefer this look.

Now place your cursor on the lower Taskbar (the colored bar at the bottom of your

screen) right click and select Properties, Then Taskbar and Start Menu Properties

will appear, click on the Start Menu Tab and place a check in the Classic Start

Menu so that your windows will look as familiar as if it were windows 98/95, then

click on OK.
Open My Computer, the click on the Tools drop down menu, then click on Folder

Options, then click on Use Classic Windows folders, and then click on Open each

folder in a separate window (If this is what you prefer). Click on the View Tab,

Uncheck Automatically search for Network Folders and Printers, then click on Apply

to ALL Folders button, and then hit OK. Hold you cursor on an open area of your

desktop and right click, then select Properties, then select Appearance, then in

the window that says Windows and Buttons, click on the drop down menu button in

the right side of that window and select Windows Classic style, then if you like

you can in the Window that's says Color Scheme select your favorite color scheme.

Next Click on the Screen Saver tab, then click on the Power Button, in the Power

Scheme windows click on the drop down menu button and select Always ON, then in

the rest of the windows select NEVER in all of them, this will ensure you don't

allow your computer to go into any type of shutdown, or sleep modes, this is

really the number one cause of failures during CD or dvd burning, next click on

the Advanced Tab, Uncheck prompt for password when computer resumes from standby,

then in the Power Buttons windows, in When I press the power button on my

computer, make sure it says Shut Down, if not hit the drop down menu button and

change it to that. In the When I press the sleep button on my computer make sure

it says Do Nothing, this will ensure weird things don't happen if you accidentally

press a sleep button which some Brand Names have, this feature can really cause

problems. Next click on the Hibernate button, Uncheck Enable Hibernation, again

this will ensure weird problems that are hard to solve with many Brand Name

computers. These are features for experienced users who know the capabilities of

their motherboards.


3 Next lets create a password on your normal account this will help in

preventing attackers from the net and while your away from your computer,

Next click on Start, Settings, Control Panel, next click on User Accounts then

under where it says, Pick an account to change, click on Administrator, next

click on Create a Password, type in the password that you want, the again to

verify, then in the bottom box think of a password hint that will help you figure

out your password in the event you forget it. Then hit Create Password, now you

will see a screen asking you if you want to make your files Private, select NO, if

you select Yes it will make it difficult to be able to recover your files in the

event of a major XP failure.

4 Next lets create a password for your Administrator account. Re-Boot your

computer, when you see the black screen you first see while it is booting up,

Slowly press F8, you will see a screen called Windows Advanced Options Menu, using

your arrow up/dn. keys select Safe Mode then press Enter, next you will see a

screen that's asks Select the Operating System to Start:, simply press enter, be

patient while your computer is booting in safe mode, next you will see a screen

that says To Begin, click your user name, select Administrator, it shouldn't ask

for a password since that is what we are going to do in this step. If it does,

you'll need to know what the password is to go any further. If you have never had

a password you will see a screen that says, Windows is running in Safe Mode,

hit Enter, Next click on Start, Settings, Control Panel, next click on User

Accounts then under where it says, Pick an account to change, click on

Administrator, next click on Create a Password, type in the password that you

want, the again to verify, then in the bottom box think of a password hint that

will help you figure out your password in the event you forget it. Then hit

Create Password, now you will see a screen asking you if you want to make your

files Private, select NO, if you select Yes it will be much harder to recover your

files in the event of a major hard drive failure.

5 Go to Start, Settings, Network Connections, Right Click on the LAN

connection and select Properties, in the Window you will see Internet Protocol

(TCP/IP), Uncheck all others, then uninstall them, when during Uninstall your

asked to restart, tell it not to at this time. What you want is the Internet

Protocol (TCP/IP) connection only. The others open you up to attack due to their

being networking services that you don't need or want unless you are on a company

network at your job. At which time your IT dept. will know how to make these

networks safe, but for us home Internet users they have no purpose accept to allow

attacks by hackers who exploit them. Once you only see the Internet Protocol

(TCP/IP), close that window and reboot your system.

6 Once your back to your desktop go to Start, Settings Network connections,

and right click on the LAN icon, then right click on Internet Protocol (TCP/IP),

and select Properties, then click on the properties button, then click on the

Advanced button then click on the Wins tab, you want everything Unchecked except

place a check in Disable Netbios over TCP/IP, then hit OK, hit OK again, This is

the number one way you get hacked since it enables by default your computer

sending out your address and making it easy for others to connect to your computer

as a network. Next were going to make sure your windows firewall is enabled and

adjusted in the safest manner, click on the Advanced tab, click on the Settings

Button, make sure there is a check in the On (Recommend) and the there is a check

in the Don't Allow Exceptions box. Next click on the Exceptions tab, make sure

noting in here has a check mark. Hit OK, hit Close, then close any open windows to

be back on your desktop.

7 Print Out the Black Viper Settings List. Now it's time to apply the Black

Viper Settings, go to control Panel, Administrative Tools, and then Services.

Change them to the recommended settings in the Safe category.

8 Disabling Dr. Watson
a. Click Start, click Run, type regedit.exe in the Open box, and then click OK.
b. Locate and click the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
NOTE: Steps three and four are optional, but they necessary if you want to restore

the
default use of Dr. Watson.
c. Click the AeDebug key, and then click Export Registry File on the Registry

menu.
d. Enter a name and location for the saved registry file, and then click Save.
e. Delete the AeDebug key.

To enable Dr. Watson
f. At a command prompt, type the following line, and then press ENTER:

drwtsn32 -I

9 Disabling Auto Complete
the bummer is it still wont stop that anoying POPup. Internet Explorer has the

neat ability to auto complete a URL as you type it. This can however be annoying

and you may want to turn this off. It can be accomplished by performing the

following:

Start Internet Explorer
From the Tools menu select 'Internet Options'
Select the Content tab
Click 'AutoComplete' under the 'Personal Information' section
Unselect 'Web addresses' and click OK
Click OK to the main dialog
Click here to view image

You can also accomplish this by setting

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete\

AutoSuggest to "no" (don't type the quotes) in the registry.

10 Lets turn of some more unneeded windows components, go to Control Panel,

Add/Remove Programs, in the left pane you'll see Add/Remove Windows Components,

click on it, no in the list adjust as follows, uncheck Indexing services, If you

want Fax services which most folks don't even know XP has, check that, make sure

there no check in Management and monitoring Tools, Uncheck MSN explorer, highlight

Networking Services then click on the details button, make sure everything is

unchecked. Uncheck Other Network File and Printer Services, uncheck Outlook

Express always use your Internet Service Providers site for reading your e-mail,

then if you don't use Microsoft Messenger uncheck that also, then click on the

Next button

11 Now let's turn off Remote, right click on My Computer and select Properties,

click on the Remote Tab and Uncheck Allow Remote Assistance Invitations to be sent

from this computer. You don't want your computer Beaming out Ya hook up with me

every time you’re on the net. If anyone asks you to enable this remember your

giving them Full access to your computer, oh Hell No.

12 Next click on the System Restore Tab and check the Turn OFF system restore,

any kid that makes a virus use's this as the first place to hide so if you think

you can just restore to a past date to get things back to Normal, I don't think

so. Now close that.

13 Now open My Computer and go up to Tools, then Folder options, click on the

View tab, and uncheck Automatically search for network folders and printers.



14 NetMeeting in Windows XP
You don't hear very much about NetMeeting these days. I suppose it's taken a

backseat to some of the other Instant Messaging programs, but if you want to use

it it's alive and available with Windows XP. If you're unfamiliar with the

program, use the Help and Support Center option on the Start Menu using the search

term NetMeeting.

Install NetMeeting
Start > Run > type conf.exe in the Open: box and click OK
The NetMeeting installer will open.

Remove NetMeeting
Start > Run > and then copy and paste the following line:

RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\inf\msnetmtg.inf,NetMtg.Remove

If your XP installation directory is C:\WINNT rather than C:\Windows, use the

following line:

RunDll32 advpack.dll,LaunchINFSection C:\WINNT\inf\msnetmtg.inf,NetMtg.Remove

Click OK and let the uninstaller do its thing.


15 Winxp Shutdown Issue
right click on desktop and select properties, then the Screen Saver Tab, then the

Power Button toward the lower right, then the APM Tab, then Check the box for

Enable Advanced Power Management Support

16 Adaware SE Settings
After you install it let it check for updates, the make the following changes

Start Adaware, click on Start, place a dot in Custom settings, click on customize,

in the drives folders and files box check the Scan within Archives button, the

click on proceed and run it

I’ll add Adaware 2008 setting’s soon



17 Office 97 and XP Error
Open regedit and browse to this key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File

Execution Options

You should see htmlmarq.ocx and htmlmm.ocx separate keys. Rename them to something

else, ie. htmlmarq.tmp and htmlmm.tmp.

You'll now be able to install Office 97, including the HTML option, without

incident.


18 Screen Copy Instructions XP
Hit Alt, Print Screen, then go to Start, then Programs then Accessories, then

click on Paint, then once Paint is open click on Edit, then click on Paste, then

you'll see the pic of what you saw on your monitor screen

19 Microsoft Registry Cleaner

http://support.microsoft.com/kb/290301



20 Now here a little gem that’s scary. Let’s say you use cable modem, your

computer is off but the power to the modem is on. Many motherboards have this

slick IT pro feature called Wake on LAN. Bet you can guess what it’s about. Yup

someone can ping your powered off computer and wake it up, I don’t think that’s a

cool feature unless your part of a corporate network and you’re the IT guy and you

want to access someone’s computer from your desk. So this one is for folks who

know their way around the motherboard BIOS, go into your BIOS and disable this

feature if your motherboard has it.
 

Supracentral

Active Member
Mar 30, 2005
10,542
10
36
Jesus christ. If you can't bother to format it, don't bother posting it. Reading that is fucking painful...

However this Luddites perspective is not the best way to go. The whole "keep your computer lonely" and "connect your printer directly to your computer" certainly works, but it's fucking moronic. Networks aren't the problem.

No PC, and I mean none, should be directly connected to the Internet to start with. There's no excuse for not running any of the cheap and freely available hardware firewalls available today.

Any of them will secure you far better than his suggestions. Hardware NAT translation, stateful packet inspection and deny all inbound firewall rules will protect you far more than this clowns' Luddite approach to modern computing.

Furthermore, stating that anti-virus software isn't necessary is downright irresponsible in this day and age. Software like PrevX is a must these days.

Overall the bulk of his advice good, however it's somewhat foolish to deny yourself the wonders and power of modern in home networking in exchange for not buying a $50 firewall. And telling people they don't need anti-virus is complete bullshit.

There's nothing wrong with shared printers and an extensive home network, just firewall it off behind any halfway decent firewall and run some decent virus/hijack protection and you are good to go.
 

suprageezer

New Member
Aug 27, 2005
778
0
0
Southern California
SupraCentral, I agree but 99.9% of the folks I come across don't want to fuss with all the things you have experience at, I use zonealarm myself. It's obvious you have far more networking experience than I do. I'd say your an IT pro right? I'm not I'm just some guy who keeps folks home computers running consistenly so they don't call me every five minutes complaining. I tried installing firewalls a few years ago, people went nuts and were calling me day and night confused. On the formatting It was formatted in word97 I simply copied it and pasted it in here. maybe you offer some suggestions and I'll fix it.
Thanks

The term Luddite has been used to describe anyone opposed to technological progress and technological change. For the modern movement of opposition to technology.
 

Supracentral

Active Member
Mar 30, 2005
10,542
10
36
Today's firewalls are capable of being setup by even the least technical of people. 99% of all computers are setup for DHCP confguration of the network card. You run a cable from the card to the firewall, and access it's built in configuration webpage as per the instructions. The average guy can get online in 10 minutes. My father is 68 years old. I bought him a firewall like the one I describe, and he got himself online with his cable modem in less than 20 minutes. Trust me, he's no IT pro. I think I've met squirrels who are more computer literate than the old man.. LOL

As for me, I'm a Sr. Enterprise Architect with 16 years industry experience, 12 of those years being with Fortune 100 firms. My current employer is one of the largest companies in the world, one of the original 30 to comprise the Dow Industrial. Our revenues are expected to increase to $59 billion in 2008 on mid single digit organic growth. Our network touches over 4,000 locations in approximately 62 countries around the world. I don't say all this to blow my own horn, but to get across the point that I am well compensated in the industry for this kind of advice and I'm willing to give it to you guys for free.

As for formatting of docs like that, the best bet is to get them copied over into a "plain text" format like MS Notepad and fix all the funny spacing and formatting and then paste them into the site.
 

suprageezer

New Member
Aug 27, 2005
778
0
0
Southern California
Thanks for the help I'll try that with notepad. Most of the folks I deal with are well over 60, retired, many house wives who are alone in retirement communities, they go nuts if they can't flick on the power button, fireup IE or aol and read their email, it's where I live I guess. I use a dlink di-624 and it seems to work fine for me, one question maybe you could answer is how do you set this router up as a NAT, I've read everything I could and can't seem to figure that out, like I said I am no expert in networking. The reason I ask is an IP will be issued to me by the router let's say it's http://192.168.0.1, I'll visit a site and it shows the IP of my dsl modem issued by my ISP. I thought in a NAT system when your computer access's a site it would see the 192 IP and not the dsl modem IP.
 

Supracentral

Active Member
Mar 30, 2005
10,542
10
36
suprageezer;924057 said:
Thanks for the help I'll try that with notepad. Most of the folks I deal with are well over 60, retired, many house wives who are alone in retirement communities, they go nuts if they can't flick on the power button, fireup IE or aol and read their email, it's where I live I guess. I use a dlink di-624 and it seems to work fine for me, one question maybe you could answer is how do you set this router up as a NAT, I've read everything I could and can't seem to figure that out, like I said I am no expert in networking. The reason I ask is an IP will be issued to me by the router let's say it's http://192.168.0.1, I'll visit a site and it shows the IP of my dsl modem issued by my ISP. I thought in a NAT system when your computer access's a site it would see the 192 IP and not the dsl modem IP.


You are already NAT translated. The 192.168.0.X addresses are reserved for private networks and are 100% non routable on the internet. What's happening is that your firewall has the (routable) address assigned by your ISP, and all traffic intended for you is intercepted by the firewall, translated to the 192 address, and then delivered to your PC.

Anyone trying to connect to your computer will only get as far as the firewall.

If sites saw you as a 192, they couldn't get traffic to you at all, since their router couldn't locate you.

Your configuration is dead on.