CyberPatriot Microsoft Windows 11 Security Tools and Security Configuration

Updating

Ensure that windows, browsers, and other important apps are updated

Important Security and Administration Tools

Control Panel and Microsoft Management Console (MMC)

Basic Local Security Policies

These control security settings on user computers within a network. You can get there by opening Control Panel → System and Security → Windows Tools → Local Security Policy​

OR Search → Windows Tools → Local Security Policy​

CHECK LOCAL SECURITY POLICIES!!!

Password Policies

Modify policies to require users to create strong passwords. To get here from Windows Tools Click Local Security Policy, then Account Policies, then Password Policies

CHECK PASSWORD POLICIES!!!

Recommended Settings for Password History

5 passwords remembered

Recommended Settings for Maximum Password Age

90 days for users, 30 for admins

Recommended Settings for Minimum Password Age

1-3 days

Minimum password length

10 characters

Complexity requirements

Should be Enabled

Reversible encryption

Should be Disabled

Account Lockout Policies

-Even if you have the strongest password possible, if you give hackers unlimited attempts to break it, they eventually will​

-Account policies govern unsuccessful attempts to log into an account​

-Click Local Security from Windows Tools, then Policy Account Policies, and lastly Account Lockout Policies​

CHECK ACCOUNT LOCKOUT POLICIES!!!

Account lockout duration

30 minutes

Account lockout threshold

3-10 invalid login attempts

Reset account lockout counter after

30 minutes

Windows Defender

A very important defensive tool in windows. CHECK WINDOWS DEFENDER!!! Open Control Panel, then System and Security, and then Security and Maintenance. Anti-malware programs should as Windows Defender should be updated regularly. A supplementary anti-virus program may be added

Firewalls

CHECK & OPTIMIZE FIREWALLS!!! Found easily in Windows Defender Security Center or Windows Defender Fire Wall opened through control panel and the system and security tab.

Adding Users

• Windows Settings → Accounts → Other people → Click + Add someone else to this PC ​

(Note: You may choose to add a user without sign-in information or a Microsoft account.)​

• OR Control Panel → User Accounts → User Accounts → Manage another account → Click Add a new user in PC settings​

Best Practice: Set Passwords for All Accounts

During a round make sure all accounts have passwords set, if not, set passwords for all accounts and be sure they are at least 10 character with 3 lower case letters, 3 uppercase letters, 3 symbols, and unique.