Microsoft® Windows® Security Resource Kit, Second Edition

Best Practices

• Educate your users. Ultimately, the security of information stored on laptop computers and mobile devices will rest with how seriously users take securing these assets and how well users follow guidelines and security polices for protecting their laptops. Although you can use technology to secure these devices to a certain extent, you must train users to do their part in securing laptop computers and mobile devices.

• Use hardware locks for laptop computers. If the risk to your organization from supplying users with laptop computers is high enough, consider using hardware locking devices.

• Use BIOS or System Key passwords. Passwords that prevent an attacker from booting a laptop computer, even temporarily, increase the security of ...