Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist

Scarfone, Karen; Souppaya, Murugiah; Johnson, Paul

doi:https://doi.org/10.6028/NIST.SP.800-68r1

SP 800-68 Rev. 1

Withdrawn on August 01, 2018.

Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist

Documentation Topics

Date Published: October 2008

Supersedes: SP 800-68 (10/20/2005)

Planning Note (8/1/2018): Withdrawn: This operating system is no longer supported.

Author(s)

Karen Scarfone (NIST), Murugiah Souppaya (NIST), Paul Johnson (BAH)

Abstract

This publication assists IT professionals in securing Windows XP workstations, mobile computers, and computers used by telecommuters within various environments. The recommendations are specifically intended for Windows XP Professional systems running Service Pack 2 or 3. SP 800-68 Revision 1 provides detailed information about the security features of Windows XP and security configuration guidelines. The publication recommends and explains tested, secure settings with the objective of simplifying the administrative burden of improving the security of Windows XP systems in five types of environments: small office/home office, enterprise, specialized security-limited functionality, legacy, and Federal Desktop Core Configuration (FDCC).

Keywords

Windows security; Federal Desktop Core Configuration; host security; Windows XP security

Control Families

Access Control; Audit and Accountability; Configuration Management; Identification and Authentication; Maintenance; System and Communications Protection; System and Information Integrity; System and Communications Protection

Documentation

Publication:
SP 800-68 Rev. 1 (DOI)
Local Download

Supplemental Material:
Security Templates R1.2.1 (zip)
NIST Windows Security Baseline Database Application v0.2.7 (zip)

Document History:
10/24/08: SP 800-68 Rev. 1

Topics

Security and Privacy
audit & accountability; maintenance

Technologies
operating systems

Laws and Regulations
OMB Circular A-130