How to protect your computer?

A firewall is by far the best first step. XP's firewall is very good at blocking new traffic- if not using xp then you can DL the free version of ZoneAlarm, however you can't make many exceptions, rather there aren't many ports you can open on the free version. Sometimes DSL and Cable provider's modem's have firewall settings also that you can use and they are also effective at blocking traffic.

If your unable/unwilling to use a firewall, then you may consider turning off certain services and portocols to secure your pc's. If your PC's do not need to access network shares, printers, or other PC's then you can turn off the "Server" service on them. This will keep anyone from connecting to the typical M$ port's of 135/139/445 and gaining possible access to the pc's HD and or registry. You should also turn off the "Remote Registry" service. To keep the services off, set them to Disable in the Services control panel in computer managment. RemoteDesktop will still function with these services turned off. You can also turn off the "Client for microsoft windows" protocol in the NIC properties, as well as the file and print sharing protocol IF your pc's do not connect to shared printers, or a windows lan, or other windows pc's. FTP and HTTP etc... will all work, but you will not be able to connect to other windows boxen, or shared printers. Directly connected printers (via usb or serial port) will still function but cannot be shared with others.
-rich

Hi Rich,

Thanks for your thorough answer - it is much appreciated.

Concerning my issue re security, I think I was not clear enough in my question.  I have no issue with protecting the system from online attacks and so forth.  My main concern is around protecting the machine via physical attacks.  For example, if the machine is stolen?

Now, I am aware that if a machine is stolen any person with half a brain cell can overcome screensaver, boot up, power on, windows passwords etc.. through plugging a HD drive into another machine.  Hence I am looking for a better way to protect the data.

The issue I see is concerning encryption.  If I encrpty everything on my server HD, it will have an impact on performance, but be open door if machine is stolen (and visa-versa) - Catch 22 really.

I have even thought of leaving the server unlocked and writing a program that deletes all files if the user does not enter in a password within 2 minutes of boot up. The issue is that it only takes one person to forget and you  have lost a whole pile of data!!!

Rich,

Wow - What extremely thorough and complete answer.  I cant thank you enough.

Awarding you 500 points seems small token of thanks.  More is diserved

Np, thank you and GL!
-rich