Recommended Security Rules

Encrypts computer disk drives to prevent unauthorized user access to the computer hard disk drive.

Prevents administrative user access when using a CMOS reset jumper, in combination with password protection for the BIOS and seal/chassis intrusion protection.

Uses seal and/or chassis intrusion protection hardware to prevent administrative user access using an external boot device to bypass workstation security software.

Remove local users from the local Administrators group to prevent unrestricted local user computer access.

Remove local users from the Power Users group to prevent users from tampering or bypassing standard Windows security policies.

Restrict network and file access as much as possible, including use restriction only to NTFS partitions.

Use of NTFS partitioning is required for installation of Ivanti Device and Application Control product solutions.

Password protect user access to the Recovery Console, which is available for the Windows DVD/CD-ROM or MSDN subscription.

Always install the latest service packs and hot fixes for the operating system supported by Ivanti Device and Application Control product solutions.

Use traditional perimeter-based security systems, like firewalls, to complement Ivanti Device and Application Control product solutions.

Maintain strong password security policies.