XPe Vulnerability Assessments

[basicjay]

Respected newsgroup members,

I am fairly new to XPe and configuration of security components. My
question is if someone would have any suggestions or advice regarding
how to measure the security of XPe, or configure security (for an
image) of XPe, on an enterprise level.

Any and all help will be accepted and appreciated.

Basicjay

 

[Gordon Smith \(eMVP\)]

The basic answer is going going to be - secure an XPE image the same way you
would an XP Pro image. You can use group policy, etc. just as you would for
the desktop OS.

There are some additional capabilities which could be *loosely* characters
as security enhancements. The write filters allow for the OS to behave as
though it can write to disk, but instead cache those writes off. Thus on a
reboot the writes would be gone. You can force the changes to disk, but you
get the idea. Loosely speaking, that's a security feature because viruses
wouldn't survive a reboot.

Other than that - just think XP Pro wrt. security.

--Gordon Smith (eMVP)

 

[basicjay]

The basic answer is going going to be - secure an XPE image the same way you
would an XP Pro image.  You can use group policy, etc. just as you would for
the desktop OS.

There are some additional capabilities which could be *loosely* characters
as security enhancements.  The write filters allow for the OS to behaveas
though it can write to disk, but instead cache those writes off.  Thus on a
reboot the writes would be gone.  You can force the changes to disk, but you
get the idea.  Loosely speaking, that's a security feature because viruses
wouldn't survive a reboot.

Other than that - just think XP Pro wrt. security.

--Gordon Smith  (eMVP)









- Show quoted text -

Gordon,
Much appreciated for the response, and the detailed information
regarding XPe. I will continue to check the embedded site for security
configurations and best practices. Could you lead me in the direction
of any XPe specific security applications which have a good track
record for checking posturing.