Windows Automatic Updates include the latest security and critical updates and service packs. These updates ensure that the computer is protected against the latest viruses and other security threats. Through Automatic Updates, Windows automatically downloads the latest updates on the computer on a pre-determined schedule.

Windows Update can be setup to automatically update your PC by automatically downloading and installing both Important updates and Recommended updates in Windows Vista. Windows Update is a free service built into Windows. It is designed to help you keep your PC more secure, reliable, compatible with devices, and able to run new features that may enhance your experience. With Windows Update, you can easily get the following:

1. The latest security updates to protect against malware and other potentially unwanted software
2. Updates that improve reliability and performance
3. Upgrades to Windows features
4. Drivers from Microsoft partners

In the forthcoming posts, I’ll be discussing about configuring the Windows Update settings.

For security reasons, a firewall is essential for a computer. It prevents any malicious program from running. It is a set of related programs configured to protect private networks connected to the Internet from intrusion. It regulates the network traffic between different computer networks. It permits or denies the transmission of a network packet to its destination based on a set of rules.

Sometimes there is a need to allow certain programs to pass through the firewall. In this post, the procedure to configure firewall to allow certain programs is discussed.

The steps for configuring firewall access for specific programs are as follows:

1. Open the Control Panel window, and then click Security.



2. In the Security window, click Windows Firewall.



3. In the left pane of the dialog box, click Allow a program through Windows Firewall.



4. The Windows Firewall Settings dialog box will appear with the Exceptions tab selected. Check or uncheck the programs according to the requirement, and then click the OK button.

Note: If you need to include programs that are not listed, click the Add program button. Click on the program you want or browse the location of the program’s exe file if it is not in the list, and then click OK. The program you have included can now pass through the firewall and can access external networks or the Internet.

In the next post, I will discuss about Windows Automatic Updates.

Windows Defender is a software product from Microsoft to prevent, remove and quarantine spyware in Microsoft Windows. It was formerly known as Microsoft AntiSpyware. It is included and enabled by default in Windows Vista and Windows 7, and is available as a free download for Windows XP and Windows Server 2003.

Windows Defender features system scan capabilities similar to other free products on the market, and includes a number of real-time security agents that monitor several common areas of Windows for changes which may be caused by spyware. It also includes the ability to easily remove ActiveX applications that are installed. If it detects anything suspicious, an alert will appear on the screen.

BitLocker Drive Encryption is a full disk encryption feature included with the Ultimate and Enterprise editions of Microsoft’s Windows Vista and Windows 7 desktop operating systems, as well as the Windows Server 2008 and Windows Server 2008 R2 server platforms. It is used to protect all files stored on the drive Windows is installed on. It encrypts the entire system drive and helps block hackers from accessing the system files they rely on to discover user passwords. By default it uses the AES encryption algorithm in CBC mode with a 128 bit key, combined with the Elephant diffuser for additional disk encryption specific security not provided by AES. BitLocker also prevents hackers from accessing the hard disk by removing it from a computer and installing it on a different computer.

BitLocker is available only in the Enterprise and Ultimate editions of Windows Vista and Windows 7. Users of other versions of Windows Vista could use a 3rd party encryption program to satisfy the need for full drive encryption.

Internet Explorer 7+ provides the following security features to help protect security and privacy when a user surfs the Internet:

1. Protected mode: The protected mode feature of IE 7+ prevents a computer from saving the files or programs of a Web site. Protected mode makes it more difficult for malware to be installed. In case such a program is installed, it makes difficult for the program to damage a user’s file and other operating system files. Protected mode is enabled by default for Internet, local intranet, and restricted sites. However, it is not enabled for trusted sites.
2. Phishing Filter: Phishing filter of IE 7+ provides protection from online phishing attacks, fraud, and spoofed Web sites. The filter helps determine whether a Web site is a legitimate site or a phishing site. The filter blocks Web sites and cautions users about both reported and suspected phishing Web sites.
3. Pop-up blocker: IE 7+ pop-up blocker allows users block most pop-ups while surfing the Internet on their computers. Users can select the level of blocking. They can either block all pop-up windows or allow pop-ups they want to see. By default, the pop-up blocker is enabled in IE 7+. While the pop-up blocker is enabled, a user can see the blocked pop-ups by clicking the IE 7+ information bar.
4. Security zones: IE 7+ provides a user the facility of configuring security through Security zones. It allows a user or systems administrator to categorize Web sites that a user visits into several groups with a suitable security level. There are four security zones found in Internet Explorer. They are as follows:
   
   • Internet
   • Local Intranet
   • Trusted Site
   • Restricted Sites

Each zone or group has four security levels, which are defined as follows:

• High
• Medium
• Medium-Low
• Low

These levels determine the type of content a user can download and run. Security zones allow users to set the appropriate level of security for various types of Web contents that they are likely to visit. For any zone, a user can configure the security level, modify the security defaults, or use custom settings for other configurations. All the security zones with their default security levels are described as follows: 

• Internet zone: All sites on the Internet that are not in the Trusted or Restricted Sites zones are included in this zone. The default security level for this zone is Medium.
• Local Intranet zone: This zone includes all sites inside an organization’s firewall. The default security level for the zone is Medium.
• Trusted Sites zone: This is the zone where a user specifies Internet sites, which are trusted by the user. These sites might include corporate subsidiaries or perhaps the Web site of a trusted business partner. The default security level for the zone is Low.
• Restricted Sites zone: This is the zone where a user specifies sites that he does not trust and wants to restrict access of these sites to his computer. The default security level for the zone is High.

Note: Except the Internet zone, all the other zones do not include Web sites by default. Web sites must be placed manually into these zones. A user or an administrator can assign a Web site to a zone with a suitable security level. Whenever one attempts to open or download any content from the Web, Internet Explorer always checks the security zone’s settings and behaves according to the applied settings.

The following five levels of predefined security settings exist for security zones:

• High
• Medium-high
• Mediu
• Medium-low
• Low
5. Privacy settings: IE 7+ provides a privacy feature to help protect users’ privacy while they are online. Privacy settings specify how a computer handles cookies. The six settings available for defining privacy are as follows:
   • Block All Cookies
   • High
   • Medium High
   • Medium
   • Low
   • Accept All Cookies

The default setting is Medium.

6. Manage Add-ons: This feature of IE 7+ enables a user disable or allow Web browser Add-ons and delete unwanted ActiveX controls.

IE 7+ is shipped with Windows Vista.

There are a number of security and safety features of Windows Vista that are not available in prior versions of Windows operating system.

The security and safety features of Windows Vista are as follows:

1. User Account Control: User Account Control (UAC) is a security feature introduced with Microsoft’s Windows Vista operating system. It helps in preventing unauthorized changes to a user’s computer. UAC asks the user for permission or an administrator password before performing actions that could potentially affect a computer’s operation or that change settings that affect other users. It improves the safety and security of the computer by preventing harmful programs from making changes to the computer. This feature works with Windows Defender and Internet Explorer 7 to help reduce the impact of viruses, spyware, and other threats.
2. Bitlocker Drive Encryption: BitLocker Drive Encryption (BitLocker) is a feature of Windows Vista. It is used to protect all files stored on the drive Windows is installed on. It encrypts the entire system drive and helps block hackers from accessing the system files they rely on to discover user passwords. BitLocker also prevents hackers from accessing the hard disk by removing it from a computer and installing it on a different computer.
   
   Note: BitLocker can only help protect files that are stored on the drive Windows is installed on.
3. Windows Firewall: Windows Firewall is a set of related programs configured to protect private networks connected to the Internet from intrusion. It is used to regulate the network traffic between different computer networks. It permits or denies the transmission of a network packet to its destination based on a set of rules. A firewall is often installed on a separate computer so that an incoming packet does not get into the network directly.
4. Windows Defender: Windows Defender is a software product designed by Microsoft to provide continuous security against malware. If it detects anything suspicious, an alert will appear on the screen. Windows Defender can also be used to scan a computer for suspicious software. It can remove or quarantine any malware or spyware it finds.
5. Windows Parental Controls: The Parental Controls feature in Windows Vista enables parents to determine which games their children can play, which programs they can use, and which Web sites they can visit. Parents can also restrict computer usage to certain times of the day through this feature by configuring the settings in the Parental Controls panel. This panel provides a centralized location to turn Parental Controls on and off, to block or allow specific programs, games, and Web sites, and to set controls for every aspect of a child’s computer use.
   
   Parents can also review activity report that shows how their children have been using the computer. Monitoring the children’s activity on the computer not only makes it easy for parents to keep track of what they are seeing, hearing, and doing, but also enables to refine and modify parental controls.
6. Encrypting File System (EFS): Encrypting File System (EFS) is a feature of Windows that allows a user to store the information in the hard disk in an encrypted format. Encryption is the strongest protection that Windows provides to help a user to keep the information secure. Using this technology, files are transparently encrypted on NTFS file systems. It helps in protection of confidential data from attackers who have physical access to the computer.
7. Data Execution Prevention: Data Execution Prevention is a security feature included in modern Windows operating systems. It prevents viruses and other security threats from executing malicious code from a non-executable region that is only used by Windows and other programs. This type of attack causes damage by taking control over one or more memory locations that are used by other programs. DEP runs in two modes: Hardware-enforced DEP and Software-enforced DEP. Hardware-enforced DEP is developed for CPUs that are able to mark memory pages as non-executable. Software-enforced DEP is developed for CPUs that do not have hardware support.
8. Digital Rights Management: Digital Rights Management is a term used for protection of digital media. Its purpose is to prevent illegal distribution of copyrighted material on the Internet. Microsoft introduces some Digital Rights Management features in Windows Vista, to help digital content providers to protect their data from being copied. They are as follows:
   1. PUMA: Protected User Mode Audio (PUMA) is the new User Mode Audio (UMA) audio stack. It provides an environment for audio playback that restricts the copying of copyrighted audio.
   2. Protected Video Path – Output Protection Management (PVP-OPM): Protected Video Path – Output Protection Management (PVP-OPM) is a technology that prevents copying of protected digital video streams, or their display on video devices that lack equivalent copy protection.
   3. Rights Management Services (RMS): Rights Management Services (RMS) is a technology that allows corporations to apply DRM-like restrictions on documents, e-mail, and intranets to protect them from being copied, printed, or even opened by people not authorized to do so.
9. Application Isolation: Windows Vista introduces Mandatory Integrity Control to set integrity levels for processes. Mandatory Integrity Control is a new feature in Windows Vista Integrity Levels (IL) to processes running in a login session.. A low integrity process cannot access the resources of a higher integrity process. This feature is used to enforce isolation on applications that have medium integrity level and cannot interrupt system level processes that are running in high integrity level, but can hook onto lower integrity processes. Windows Vista defines four Integrity Levels: Low, Medium, High, and System. By default, the processes start in Medium Integrity Level.

By getting MCAS certified, you can prove your expertise in using the latest Microsoft Office programs and the Windows Vista operating system. Getting certified will help you to differentiate yourself in today’s competitive job market, broaden your employment opportunities by displaying your advanced skills, and result in higher earning potential. Research indicates that certified individuals have increased competence, productivity, and credibility with their employers, co-workers, and clients.

Candidates must pass one certification exam in order to earn the MCAS credential:

1. MCAS: Windows Vista for the Business Worker (Exam 77-600)
2. MCAS: Microsoft Office Word 2007 (Exam 77-601)
3. MCAS: Microsoft Office Excel 2007 (Exam 77-602)
4. MCAS: Microsoft Office PowerPoint 2007 (Exam 77-603)
5. MCAS: Microsoft Office Outlook 2007 (Exam 77-604)
6. MCAS: Microsoft Office Access 2007 (Exam 77-605)

Note: For more certifications of Microsoft Office, visit the following pages:

1. MCTS: Managing Projects with Microsoft Office Project 2007
2. MCTS: Microsoft Office SharePoint Server 2007, Configuring

Microsoft Certified Application Specialist (MCAS) certification validates the productivity skills of candidates for using Microsoft Office 2007 applications and the Windows Vista operating system. It helps a candidate to meet the demand for the most up-to-date skills on the latest Microsoft technologies. Individuals interested in validating their skills can take hands-on certification tests for Windows Vista, Microsoft Office Word, Microsoft Office Excel, Microsoft Office PowerPoint, Microsoft Office Outlook and Microsoft Office Access.