Apple and Windows Device Security Recommendations: Difference between revisions

No edit summary
 
(30 intermediate revisions by 3 users not shown)
Line 46: Line 46:
*Set the '''Require Passcode''' to 15 minutes or less.
*Set the '''Require Passcode''' to 15 minutes or less.
*Set '''Simple Passcode''' to OFF - this option may be disabled if Riverdale has placed a more complex passcode requirement.
*Set '''Simple Passcode''' to OFF - this option may be disabled if Riverdale has placed a more complex passcode requirement.
**This setting will then ask for you to enter a more complex password which can contain upper & lower case letters, numbers, and punctuation marks. At the very least, create a passcode which follows the [http://knowledge.riverdale.edu/index.php?title=Change_My_Passwords#Password_Requirements requirements for your Riverdale Domain password.]
**This setting will then ask for you to enter a more complex password which can contain upper & lower case letters, numbers, and punctuation marks. At the very least, create a passcode which follows the [https://howdoi.riverdale.edu/wiki/Create_a_Strong_Passphrase requirements for your Riverdale Domain password.]
***Using your Riverdale Domain password is '''''not recommended''''' for this passcode. See this page on [http://secure.wikimedia.org/wikipedia/en/wiki/Shoulder_surfing_%28computer_security%29 Shoulder Surfing] for more information on this recommendation.
***Using your Riverdale Domain password is '''''not recommended''''' for this passcode. See this page on [http://secure.wikimedia.org/wikipedia/en/wiki/Shoulder_surfing_%28computer_security%29 Shoulder Surfing] for more information on this recommendation.
*Optionally, select the '''Erase Data''' setting to erase all data on the iOS device after 10 failed passcode attempts. If you use this setting, make sure to backup and sync your iOS device on a regular basis. After the '''Erase Data''' mechanism is invoked, the iOS device will be wiped clean and you will need to restore the settings & applications from your laptop/desktop or through iCloud.
*Optionally, select the '''Erase Data''' setting to erase all data on the iOS device after 10 failed passcode attempts. If you use this setting, make sure to backup and sync your iOS device on a regular basis. After the '''Erase Data''' mechanism is invoked, the iOS device will be wiped clean and you will need to restore the settings & applications from your laptop/desktop or through iCloud.
Line 53: Line 53:


=== General Resources ===
=== General Resources ===
We recommend running '''Windows 11''', which is the latest operating system from Microsoft: [https://www.microsoft.com/software-download/windows11 Download Windows 11]


=== Best Practices ===
=== Best Practices ===
==== Logging In ====
'''Windows Hello''' is a secure way to get instant access to your Windows 11 devices using a '''PIN, facial recognition, or fingerprint'''. You'll need to set up a PIN as part of setting up fingerprint or facial recognition sign-in, but you can also sign in with just your PIN. These options help make it easier and safer to sign into your PC because your PIN is only associated with one device. Information about: [https://support.microsoft.com/en-us/windows/learn-about-windows-hello-and-set-it-up-dae28983-8242-bb2a-d3d1-87c9d265a5f0 Windows Hello]
==== Protect Your Data ====
Windows has a [https://support.microsoft.com/en-us/windows/back-up-your-windows-pc-87a81f8a-78fa-456e-b521-ac0560e32338 backup feature] in the operating system, but we generally recommend storing your data on Riverdale's Google Drive. We back up your RCS GDrive for you!
==== Antivirus ====
The Windows operating system comes with [https://en.wikipedia.org/wiki/Microsoft_Defender_Antivirus Windows Defender]. This is a functional and well regarded antivirus product, and it's free. On Riverdale managed laptops, we deploy Sophos antivirus, which is managed via Sophos Central.
==== Keep Your Device Up-to-Date ====
It's best practice to keep Windows up-to-date via [https://support.microsoft.com/en-us/windows/update-windows-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a Windows Update] and to update drives from the manufacturer (Dell, HP, Lenovo, etc). Drivers from the manufacturer can be found on their respective Support page. They often provide a "device scanner" tool that takes inventory of your machine and only applies the updates/drivers that it's missing.
281

edits