Windows Vista Security: Praxisorientierte Sicherheit für Profis

126

|

Chapter 4: Installing, Configuring, and Maintaining Software

While you can enable, disable, and remove startup programs from your account and

you may not need administrator permissions, you must have administrator permis-

sions to manage startup programs configured for other, or all, users on your computer.

You can enable, disable, and remove startup programs by following these steps:

1. Click Start, click All Programs, and then click Windows Defender.

2. On the Windows Defender toolbar, click Tools and then click Software Explorer.

3. In Software Explorer, the Startup Programs option is selected in the Category list

by default. Click a startup program in the left pane.

4. If the program is configured as a startup program for your account, you can

enable, disable, or remove it using the option buttons provided.

5. If the program is configured as a startup program for another user or for all

users, the Remove, Disable, and Enable buttons will be dimmed so that you can-

not select them. Before you can use these options, you must click “Show for all

users,” and then provide consent or credentials when prompted.

6. If you are disabling or removing a startup program, you will need to confirm this

when prompted by clicking Yes.

Viewing and Managing Network-Connected Programs

As Figure 4-13 shows, you view programs that are connecting to the local area net-

work (LAN), the Internet, or both by selecting the Network Connected Programs

option on the Category list in Software Explorer. In the Name list, programs are

listed by name according to the software publisher. The process ID number of the

main process under which the program is running follows the program name.

You can use Software Explorer to work with your network-connected programs in sev-

eral ways. You can view details about a network-connected program’s configuration by

clicking the program in the left pane. The details provided for Winsock service provid-

ers include similar details to running programs. Additional details you’ll see include:

Foreign Address

Lists the remote Internet Protocol (IP) address and port number being used by a

particular protocol (if any)

Local Address

Lists the local IP address and port number being used by a particular protocol (if

any)

Protocol

Lists the Transmission Control Protocol/Internet Protocol (TCP/IP) being used

by the program

State

Lists the state of the port being used, such as whether it is listening for incoming

requests

Managing Software Once It’s Installed

|

127

You can also use Software Explorer to stop or block incoming connections to a

network-connected program. While you can view and work with network-con-

nected programs you started, you must have administrator permission to view and

work with network-connected programs started by other user or system accounts.

To view network-connected programs for other users and the operating system,

click “Show for all users.” When prompted, provide consent or credentials. You’ll

then be able to view and work with all network-connected programs.

When you select a program or process in the left pane, you can terminate the pro-

cess by clicking End Process and then clicking Yes when prompted to confirm the

action. When you select a program and then click Block Incoming Connections, you

can prevent network users from connecting to the program.

Figure 4-13. Viewing your network-connected programs