SASANK@TECHNOMANIA

Windows Vista includes a new hard drive encryption feature called BitLocker Drive Encryption. BitLocker can be a very useful security feature for businesses and home users that have sensitive and confidential information stored on their computer. Unfortunately, BitLocker Drive Encryption by default requires a Trusted Platform Module (TPM Chip) version 1.2 or later installed in your computer. A lot of the computers and laptops on the market do not come with TPM chips installed since they are typically only found in premium model business computers. If you have Windows Vista Business, Ultimate or Enterprise but do not have a TPM chip, you can still use BitLocker Drive Encryption.

Hidden away in local group policy is a setting that will allow you to turn on the ability to use a USB storage device instead of a TPM key to store the encryption key. This is a great feature for users that don't have the latest high-end hardware because you can still use hard drive encryption. However, every time you turn on your computer, the USB storage device that has the encryption key located on it must be plugged in. Without it, your computer will not boot up. One BitLocker Drive Encryption is setup with a USB storage device, that USB storage device basically becomes the key to your computer.

Follow these steps to turn on the ability to use a USB storage device with BitLocker Drive Encryption on hardware that does not have a TPM device:

1. Click on the Start Button and key in gpedit.msc and hit Enter.
2. Navigate through: Computer Policy, Administrative Templates, Windows Components and BitLocker Drive Encryption.
3. Right click on Control Panel Setup: Enable advanced startup options and select Properties.
   Check Enabled and hit OK.

In my last article I showed you how you can protect your computer against anonymous user account attacks by turning on account logon auditing so you could see when someone attempts to remotely logon to your account. Now I am going to help your increase your level of protection with the Account Lockout Policy.

Creating an Account Lockout Policy will protect your account by limiting the number of time a remote application or attacker can try to guess your password. This works by automatically locking out your account after a designated number of incorrect passwords were entered. Your account will remain locked out for a designated period of time before it is automatically unlocked and it can be logged into again. This provides a valuable addition to your account security because it can render brute force password attacks useless. If you have your lockout threshold set to 4 bad attempts and the lockout duration to 15 minutes, an attacker can try to guess your password a maximum of 16 times per hour.

Now that you know how valuable an Account Lockout Policy is, let’s get it setup on your computer:

1. Click on the Start Button and key in Secpol.msc and hit Enter.
2. Navigate through Account Policies and Account Lockout Policy.
3. Right click on Account lockout threshold and select Properties.
4. Enter in the value you want to use and hit OK to save. I like to use 4 here.
5. Windows will set the default values for the lockout duration and Reset account lockout counter values. If you want to change these values from the defaults (30 minutes), right click on them and select Properties. After making your changes hit OK to save and exit.
   
   

Windows Vista includes a two-way firewall that has outbound filtering disabled by default. Why? The best explanation that I got was that it was too complicated for end-users to use so they had that feature turned off as well as hidden. In fact, it is hidden so well that many users may think that the two-way firewall was yet another feature that was pulled from the final product. While that is true for other features the two-way firewall made it into the final product, you just need to know how to find it.

To get started, just click on the Start Button and key in wf.msc and hit Enter. This will bring up the comprehensive Windows Firewall with Advanced Security management interface. Here you will be able to configure rules for incoming as well as outgoing connections.

Make sure that you set the default action for outbound connections from allow to block. Otherwise the outbound firewall will be useless because it will allow all connections. This can be done from the Windows Firewall Properties link found on the main screen of the management interface.

The indexing service in Windows Vista is responsible for making those search boxes all over the operating system lightening fast. By default Windows automatically indexes all files in your user profile folders, start menu and any files you have setup for offline access. If you have a lot of files in these locations and the files change often you can be putting a heavy load on the indexing service. For maximum performance when using Windows Vista I recommend disabling indexing for all other locations other than the Start Menu. This will lessen the background work that Windows Vista has to do. It will also slow down your searches of other locations but that is the price you must pay for this performance benefit.

Follow these steps to tweak the indexing locations:

1. Click on the Start Button and key in Indexing Options and hit Enter. Indexing Options will now load.
   
   
2. Hit the Modify button.
3. Next, click on Show all locations.
4. Scroll through the tree-view and uncheck any folders you do not want to be indexed. When you are finished, click OK.
5. If you want to change advanced indexing settings such as what file types are indexed click on the Advanced button. Otherwise hit Close.

In Windows Vista the networking components were designed to be much more intelligent and automatically adjust the network settings to optimize the connection speed. This is a great new feature. Your network components basically tweak themselves for optimal performance. In most situations, these components automatically adjust perfectly for best performance. However, with wireless WAN cards the detection of network conditions is flawed and can result in slower network performance.

To fix this problem, Microsoft has released a hotfix for users affected by this issue. If you have a Wireless WAN device, I suggest you give this hotfix a try.

KB 940646 details:

This problem occurs because of the way that TCP receive window auto tuning is used in Windows Vista for connections that only receive data.

Windows Vista obtains a round-trip time (RTT) estimate at the time of connection setup and every time that a new segment of data that is transmitted. A connection that only receives data is limited to the single RTT sample that is obtained at the time of connection setup. Because the connection only receives data, the connection cannot "converge" to the actual RTT of the connection. For example, because the RTT data may fluctuate for various reasons, a "converge" operation is performed to estimate a meaningful RTT by using blending current and previous RTT data. However, if the connection cannot converge to the actual RTT of the connection, the bandwidth delay product (BDP) estimate that Vista obtains is also incorrect. Therefore, the connection's receive window is limited, and throughput of the connected transmission network is reduced.

Download 32-bit version

Download 64-bit version

When you type in a domain name such as wingeek.com in your browser the computer must resolve the friendly name into an IP address of the server to download the web page and supporting files. Windows uses a DNS (domain name system) server to lookup this information. By default, Windows uses your ISP’s DNS server. Depending on your provider, the performance of their DNS resolving server varies. Some large national providers are known to provide unreliable and slow DNS servers.

The performance of the DNS server you are using is one component that affects the speed of your internet browsing. Since each domain name you type in must be resolved into an IP address, the amount of time that takes will delay the loading of any web page. Some users with overloaded ISP DNS servers can see delays in multiple seconds before web pages start to load.

OpenDNS provides free alternative DNS servers that anyone can use with any internet provider. Unlike many national internet providers, OpenDNS’s DNS servers are very fast and reliable. Using OpenDNS servers instead of your ISP servers will help you speed up your internet browsing by cutting down on the delay between resolving a domain name and getting the IP address so your browser can start loading the web page.

Configuring your computer to use OpenDNS servers instead of your ISP’s is a simple change that works in both Windows XP and Windows Vista:

1. Click on the Start Button and type in ncpa.cpl and hit Enter. In Windows XP Click on the Start Button, click Run and then type in ncpa.cpl
2. Right click on your active network connection that you use to connect to the Internet and select Properties.
3. On the Networking / General tab, select Internet Protocol (TCP/IP) (version 4 on Windows Vista) and hit Properties.
4. On the properties screen, select Use the following DNS server addresses and then type in 208.67.222.222 in the preferred and 208.67.220.220 in the alternate boxes.
   
   
   
5. Hit OK twice and you are finished.

Visit OpenDNS.com to learn more about some of the advanced features of OpenDNS on top of the speed benefits.

When a users enters text in the search box on the start panel Windows automatically searches the file index as well. The file index includes all of the searchable files on your hard drive and can be quite large. One way to speed up searching through your start menu applications is to narrow the scope of the search so that it does not include hard drive files.

Prevent Start Menu Searches from searching the File index:

1. Open Registry Editor (regedit).

2. Navigate through HKEY_CURRENT_USER, Software, Microsoft, Windows, CurrentVersion, Explorer and finally Advanced.

3. Find and right click on Start_SearchFiles and select Modify.

4. Set the Value to 0.

Restart the Explorer.exe process or just reboot your computer.

ALSO............

The search box on the new Start Menu in Windows Vista can be very useful for everyday tasks. This search box is very powerful because not only does it search the start menu and control panel, but it also searches your pictures, documents and even your e-mails. The scope of the search is very wide and you can see some performance benefits if you narrow it down to just searching the start menu and control panel. Follow these steps to optimize your start menu search:

1. Right click on the start button and select Properties.
   
2. Click on the Customize button.
3. Remove the check from Search Communications.
4. Set Search Files to Don't search for files.
   
5. Click OK.
6. Click OK once more.

Windows Vista operates external hard drives that are connected with USB differently than internal drives. Write caching is disabled so that you can safely remove the drive at almost any time. This is a great feature for USB thumb drives that are frequently inserted and removed from your computer. But if you have a large hard drive that is in an external enclosure that you never disconnect from your computer, write caching is also disabled which can decrease performance.

This tweak is going to show you how to increase the performance of your external hard drives by turning write caching back on as well as activating advanced performance. Let’s get started:

1. Click on the start button, then right click on Computer and select Manage.
2. Click on Device Manager on the side menu.
3. Expand Disk drives and locate your external drive from the list.
4. Right click on the drive and select Properties.
5. On the Policies tab, select Optimize for performance.
6. Next, check Enable write caching on the disk and Enable advanced performance as shown below.
   
   
7. Hit OK and reboot.

Enjoy the increased performance!

Internet Explorer 7 only allows you to download two files from the same server at a time. This is not a software limit but rather a limit imposed based on the web standard. Since this is simply a software setting, it can be modified and you can increase the limit to something much high such as 10. Follow the steps below to increase your max downloads from the same server:

1. Click on the Start Button and type in Regedit.
2. When Registry Editor loads navigate through HKEY_CURRENT_USER, Software, Microsoft, Windows, CurrentVersion and Internet Settings.
3. Right click on MaxConnectionsPerServer and select Modify. Set the decimal value to something greater than 2.
4. Right click on MaxConnectionsPer1_0Server and select Modify. Set the decimal value to something greater than 2.
5. Reboot.

The transparent glass in Windows Vista computer can look very nice. However, on some computers that have underpowered video adapters will see a performance hit when running the transparent glass effect. One way to speed up Windows Vista and still get the benefits of aero, such as flip 3D and taskbar thumbnails, is to disable glass transparency.

1. Click on the desktop and select Personalize.
2. Select Windows Color and Appearance.
3. Uncheck Enable Transparency.

When I am working in command prompt the majority of the things I do require an administrative level command prompt. I normally have to right click on my command prompt shortcut and then select Run As Administrator. However, there is an easy way to modify the shortcut so that you no longer have to right click on it and select Run As all the time.

1. Right click on your command prompt shortcut and select Properties.
2. On the shortcut tab hit Advanced.
3. Check the Run As Administrator box and hit OK.
4. Hit OK once more to close the properties window.

You now have an administrative level shortcut without the right click.