managing it security training

Skill.Soft.Managing.IT.Security.Training-LiB/autorun.inf[AutoRun]open=CBT_Launch.exeicon=icon.ico

Skill.Soft.Managing.IT.Security.Training-LiB/CBT_Launch.exeSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/core_html.css/* STYLES FOR CONTENT ON SCREEN */

#fullpage-box { width: 600px; z-index: 1; }#content-box { color: #000000; margin-left: 40px; width: 540px; background: #ffffff; }#copyright-box { left: 30px; margin-top: 50px; text-align: center; width: 646px; }#printer-article { border: 0 none; color: #000000; margin-left: 540px; margin-top: 15px; position: absolute; vertical-align: top; width: 100px; z-index: 12; background: #ffffff; }#printer-text { border: 0 none; color: #000000; font-size: 0.8em; margin-top: 1.5em; padding-bottom: 1.0em; z-index: 12; margin-left: 40px; background: #ffffff; }#toc { margin-bottom: 2.0em; }.action { color: #000000; font-size: 0.9em; margin-left: 55px; padding: 5px; width: 520px; background: #f0f0f0; }.article-subheading { color: #000000; font-family: Arial, sans-serif; font-weight: bold; margin-left: 55px; padding-top: 10px; text-decoration: none; background: #ffffff; }.bodytext-bullet-list { font-weight: 500; }.bodytext-definition-list { color: #000000; font-size: 0.9em; padding: 10px; background: #f0f0f0; }.bodytext-definition-list dd, .bodytext-definition-list dt { color: #000000; font-size: 1.0em; line-height: 1.2em; background: #f0f0f0; }.bodytext, .intro-bodytext{ font-size: 0.9em; font-weight: 500; margin-left: 55px; width: 520px; }.callout-rule { margin-left: 100px; text-align: left; width: 480px; }.callout-text { color: #003366; margin-left: 110px; text-align: center; text-decoration: none; width: 460px; font: italic bold 1.0em "Times New Roman", Times, serif; background: #ffffff; }.center, .holder { padding-top: 10px; }.code-paragraph { color: #000000; margin-left: 55px; text-align: left; text-decoration: none; width: 520px; font: normal 0.9em "Courier New", monospace; background: #f0f0f0; padding: 15px 20px; }.coding-list-container { color: #000000; margin-left: 55px; text-align: left; text-decoration: none; width: 520px; font: normal 0.9em "Courier New", monospace; background: #f0f0f0; padding: 15px 20px 25px; }.coding-list-label { color: #003366; padding-top: 5px; font: bold 1.0em Arial, sans-serif; background: #f0f0f0; }.copyright-text { color: #000000; font-size: 0.7em; line-height: 105%; padding-bottom: 30px; background: #ffffff; }.division { border-bottom-color: #bababa; border-bottom-style: solid; border-bottom-width: thin; color: #003366; padding-bottom: 0.5em; padding-left: 2px; padding-top: 1.0em; width: 620px; font: bold 1.1em Arial, sans-serif; background: #ffffff; }.drilldown-bullet-list { padding-left: 35px; }.feature-box { border-color: #bababa; border-style: solid; border-width: 0.4em; color: #b00000; font-size: 0.9em; margin-left: 55px; text-align: left; width: 520px; background: #f5f5f5; }.feature-content-container { margin: 0.3em; padding: 0.5em; }.feature-label, .slide-content { color: #003366; margin-left: 55px; text-decoration: none; font: bold 1.0em Arial, sans-serif; background: #ffffff; }.feature-stem { font-family: Arial, sans-serif; color: #b00000; font-weight: 500; margin-left: 1.0em; margin-right: 1.0em; background: transparent; }.feature-subheading { color: #000000; margin-left: 1.0em; margin-right: 1.0em; font: 700 1.0em Arial, sans-serif; background: transparent; }.feature-text { color: #000000; font-family: Arial, sans-serif; font-style: italic; font-weight: 500; margin-left: 1.0em; margin-right: 1.0em; background: transparent; }.secondlevel-text { color: #003366; font-family: Arial, sans-serif; font-style: italic; font-weight: 500; margin-left: 1.0em; margin-right: 1.0em; background: transparent; }.secondlevel-table-text { color: #003366; font-family: Arial, sans-serif; font-style: italic; font-weight: 500; width: 96%; background: transparent; }.link-instruction { color: #000000; margin-left: 55px; text-align: left; width: 520px; font: italic 500 0.8em Arial, sans-serif; background: #ffffff; }.moderator, .audience, .guest { font-size: 0.9em; margin-left: 55px; width: 520px; }.no-class { font-style: normal; }.objective-heading, .speaker-heading { border-bottom-color: #bababa; border-bottom-style: solid; border-bottom-width: thin; color: #003366; padding-bottom: 0.5em; padding-left: 2px; padding-top: 1.0em; width: 620px; font: bold 0.9em Arial, sans-serif; background: #ffffff; }.objective-text { margin-left: 55px; width: 500px; font: italic 500 1.0em "Times New Roman", Times, serif; }ul.objective-list { width: 600px; list-style-type: square; list-style-position: outside; text-align: left; }.objective { padding-bottom: 0.3em; font: italic 500 1.1em "Times New Roman", Times, serif; }.options-list { text-decoration: none; font: 500 100% Arial, sans-serif; }.options { font-family: Arial, sans-serif; list-style-position: outside; margin-left: 50px; text-decoration: none; }li.lettered-options { list-style-type: upper-alpha; }.picture-box { border-color: #ffffff; border-style: solid; border-width: 0.1em; font-size: 0.9em; margin-bottom: 0px; margin-left: 54px; text-align: left; width: 540px; }.picture-caption { font-size: 0.8em; font-weight: bold; margin-left: 55px; margin-top: 5px; }.question-definition-list { color: #b00000; margin-left: 1.0em; margin-right: 1.0em; padding-top: 1.0em; width: 440px; font: 600 1.0em Arial, sans-serif; background: transparent; }.question-definition-list dd { color: #b00000; margin-left: 1.0em; margin-right: 1.0em; margin-bottom: 1.0em; font: normal 1.0em Arial, sans-serif; background: transparent; }.question-definition-list dt { color: #b00000; margin-left: 1.0em; margin-right: 1.0em; font: 800 1.0em Arial, sans-serif; background: transparent; }.ranking-question-table { margin-left: 1.0em; margin-right: 1.0em; }.replaceable, em { font-style: italic; }.step-details { font-size: 0.8em; font-weight: normal; padding-bottom: 0.5em; text-align: left; }.step-number { font-size: 0.8em; font-weight: bold; text-align: center; }.subheading-regular { color: #000000; margin-left: 55px; padding-top: 10px; text-decoration: none; font: 700 0.9em Arial, sans-serif; background: #ffffff; }.supplement-instruction { color: #000000; margin-left: 1.0em; margin-right: 1.0em; font: italic 500 0.8em Arial, sans-serif; background: transparent; }.supplement-text { color: #000000; font-family: Arial, sans-serif; font-style: normal; font-weight: 500; margin-left: 1.0em; margin-right: 1.0em; background: transparent; }.supplement-title { color: #003366; font-family: Arial, sans-serif; font-style: normal; font-weight: bold; margin-left: 1.0em; margin-right: 1.0em; background: transparent; }.syntax-box, .table-box { margin-left: 55px; margin-top: 10px; margin-bottom: 10px; }.syntax-paragraph { color: #800000; margin-left: 55px; margin-right: 10px; text-align: left; text-decoration: none; width: 520px; font: normal 0.9em Arial, sans-serif; background: #ffffff; padding: 0px 10px 0px 30px; }.title { color: #003366; width: 600px; font: bold 1.3em/1.2em Arial, sans-serif; background: #ffffff; }.transcript-bullet-list { margin-left: 104px; }.transcript-subheading-regular { font-size: 0.9em; font-weight: 700; margin-left: 55px; width: 520px; }a:active { color: #ff910e; font-family: Arial, sans-serif; font-weight: bold; text-decoration: underline; background: transparent; }a:hover { color: #b00000; font-family: Arial, sans-serif; font-weight: bold; text-decoration: underline; background: transparent; }a:link, a:visited { color: #0000bb; font-family: Arial, sans-serif; font-weight: bold; text-decoration: underline; background: transparent; }blockquote { color: #000000; margin-left: 100px; width: 505px; font: 0.7em Arial, sans-serif; background: #ffffff; }body { background: url(background.gif) #ffffff; color: #000000; margin: 0px 0px 0px 0px; padding: 0px 0px 0px 0px; font: 90%/120% Arial, sans-serif; }caption { color: #b00000; padding-bottom: 10px; text-align: left; font: bold small Arial, sans-serif; background: #ffffff; }caption.ranking-question { color: #b00000; padding-bottom: 10px; text-align: left; font: bold small Arial, sans-serif; background: #f5f5f5; }code { text-decoration: none; font: normal 1.0em "Courier New", monospace; }dd { color: #000000; margin-bottom: 0.4em; text-align: left; font: normal 0.9em/105% Arial, sans-serif; background: #ffffff; }dl { color: #000000; font-family: Arial, sans-serif; font-weight: normal; margin-left: 55px; text-align: left; width: 520px; background: #ffffff; }dt { color: #000000; margin-bottom: 0.4em; text-align: left; text-decoration: none; font: bold 0.9em/105% Arial, sans-serif; background: #ffffff; }h1 { color: #000000; font-family: Arial, sans-serif; font-weight: bold; text-decoration: none; background: #ffffff; }h2 { text-decoration: none; font: bold 1.0em Arial, sans-serif; }h3 { color: #000000; text-decoration: none; font: bold 0.8em Arial, sans-serif; background: #ffffff; }h3.heading-3 { margin-bottom: -0.5em; color: #000000; margin-left: 55px; text-decoration: none; font: bold 1.1em Arial, sans-serif; background: #ffffff; }h4, h5 { color: #000000; text-decoration: none; font: italic bold 0.8em Arial, sans-serif; background: #ffffff; }h4.heading-4 { margin-bottom: -0.5em; color: #000000; margin-left: 55px; text-decoration: none; font: bold 1.0em Arial, sans-serif; background: #ffffff; }img { border: 0 none; }p { color: #000000; font-family: Arial, sans-serif; background: #ffffff; }pre { margin-left: 100px; margin-top: 0px; padding-top: 0px; }strong { font-weight: bold; }#printout-logo-right-solo { display: none; }#objective-box, #speaker-box, #title-box { color: #000000; margin-left: 40px; background: #ffffff; }.action code, .coding-list-body { color: #000000; background: #f0f0f0; }.top-link, .toc-link { color: #d0d0d0; font-size: 0.8em; margin-left: 55px; background: transparent; }.hidden { display: none;}.highlighted { color: #ffffff; background-color: #800000; }

/* STYLES FOR TABLES AND LISTS */

.holder div.table-box {margin-top: 0px; }li { font-family: Arial,Helvetica,sans-serif; font-style: normal; font-variant: normal; font-weight: normal; list-style-position: outside; margin-bottom: 0.2em; margin-top: 2px; }li li { list-style-type: circle; list-style-position: outside; }li ol, li.numbered { list-style-type: decimal; }li.nested { font-size: 1.0em; list-style-type: none; margin-bottom: 0.0em; }ol.options { padding-left: 10px; margin-right: 20px; list-style-type: decimal; }table { border-collapse: collapse; border-color: #c0c0c0; border-style: solid; border-width: 1px; font-family: Arial, sans-serif; text-align: left; vertical-align: top; }table.ranking { border-collapse: collapse; border-color: #c0c0c0; font-family: Arial, sans-serif; text-align: left; vertical-align: top; width: 90%; }td { border-color: #c0c0c0; border-style: solid; border-width: 1px; color: #000000; padding: 5px; text-align: left; vertical-align: top; font: 0.8em Arial, sans-serif; background: #ffffff; }td li { font-size: 100%; }td li.nested ol, td li.nested ul { font-size: 100%; margin: 0.2em 0.2em 0.2em 0.9em; padding: 0.2em 0.2em 0.2em 0.9em; }td ol { list-style-type: decimal; list-style-position: outside; margin: 0.2em 0.2em 0.2em 0.9em; padding: 0.2em 0.2em 0.2em 0.9em; text-decoration: none; font: 100% Arial, sans-serif; }td ul { list-style-type: disc; list-style-position: outside; margin: 0.2em 0.2em 0.2em 0.9em; padding: 0.2em 0.2em 0.2em 0.9em; text-decoration: none; font: 100% Arial, sans-serif; }td.corner, th.corner, td.blank, th.blank { font-style: italic; background: #d9d9d9; color: #000000; }th { color: #000000; padding: 5px; text-align: left; vertical-align: top; font: bold 0.8em Arial, sans-serif; background: #c0c0c0; }th.rowheader { color: #000080; padding: 5px; text-align: left; vertical-align: top; border-bottom: solid thin #ffffff; font: bold 0.8em Arial, sans-serif; background: #c0c0c0; }tr { vertical-align: top; border-color: #c0c0c0; border-width: 2px; }ul ol { margin-left: 0px; padding-left: 28px; margin-top: -0.2em; margin-bottom: 0.9em;}ul ul { margin-left: 0px; padding-left: 20px; margin-top: -0.2em; margin-bottom: 0.9em;}ul,ol, .transcript-bullet-list { list-style: disc outside; margin-left: 0px; padding-left: 100px; text-decoration: none; font: 0.9em Arial,Helvetica,sans-serif; }

/* LEGACY CONTENT SUPPORT STYLES - DO NOT DELETE WITHOUT COMPLETE TEST FOR OVERLAP WITH CURRENT CONTENT */

.seminar-caption { color: #003366; font-size: 0.8em; font-weight: bold; margin-left: 55px; margin-top: 5px; background: #ffffff; }.slide-bullet-list { color: #b00000; font-weight: 600; list-style-position: outside; list-style-type: square; margin: 1.5em; padding-left: 1.5em; text-decoration: none; background: transparent; }.slide-bullet-regular { font-family: Arial, sans-serif; font-weight: bold; text-decoration: none; }.slide-code-paragraph { color: #003366; padding-left: 10px; padding-right: 10px; text-align: left; text-decoration: none; font: bold 1.0em "Courier New", monospace; background: #f5f5f5; }.slide-list-intro { color: #b00000; margin-left: 1.0em; margin-right: 1.0em; font: 600 0.9em Arial, sans-serif; background: transparent; }.slide-running-head { color: #b00000; margin-left: 1.0em; margin-right: 1.0em; text-transform: uppercase; font: 900 1.0em Arial, sans-serif; background: transparent; }.slide-title { color: #b00000; text-decoration: none; font: bold 1.1em Arial, sans-serif; background: #ffffff; }.slide { padding-bottom: 30px; }.speaker-text { margin-left: 55px; width: 500px; font: bold 0.9em Arial, sans-serif; }.workshop-code-slide { color: #b00000; font-size: small; font-weight: 600; background: #f5f5f5; }.workshop-code { color: #000000; margin-left: 55px; text-align: left; text-decoration: none; font: bolder 1.0em "Courier New", monospace; background: #f0f0f0; padding: 15px 20px 15px 40px; }

/* -------------------------------------------------- */

/* STYLES FOR PRINTING */

@media print {

#resourcespage, #resources { margin-left: 0px; margin-right: 30px; padding-left: 0px; }ul, ol { margin-left: 20px; padding-left: 20px; }td { height: 1.5em; line-height: 1.3em; }td.field { width: 100px; }.formtable { page-break-before: always; }#printout-logo-right-solo { display: block; text-align: right; clear: left; }#printout-logo-right { display: block; float: right; }#printout-logo-left { display: block; float: left; }#title-box-article, .title-article { width: 100%; padding-bottom: 16px; }#coursereference { margin-top: 2.0em; border-top-color: #bababa; border-top-style: solid; border-top-width: 2px; border-bottom-color: #bababa; border-bottom-style: solid; border-bottom-width: 2px; padding-top: 0.1em; margin-left: 0px; margin-right: 0px; width: 100%; }#coursereference p { margin-top: 0.3em; margin-bottom: 0.2em; margin-left: 0px; font-size: 80%; width: 100%; }p.coursetopic { margin-top: 0.2em; margin-bottom: 0.2em; margin-left: 0px; font-size: 80%; }h1.title-article, h1.aid-title { margin-top: 3.0em; border-bottom-color: #bababa; border-bottom-style: solid; border-bottom-width: 2px; padding-bottom: 0.2em; width: 100%; margin-bottom: 10px; font-size: 1.1em; margin-left: 0px; }#main-box { margin-left: 0px; margin-top: 0.1em; display: block; width: 100%; }p { padding-bottom: 0px; font-size: 0.9em; margin-left: 0px; }ul { margin-bottom: -10px; padding-bottom: 0px; font-size: 0.9em; list-style: disc outside; margin-left: 15px; }li { line-height: 120%; margin-bottom: 0.4em; }#bottom-index-box { margin-bottom: 0px; }#objectiveslist { text-indent: 0px; }p.objectives-intro { padding-top: 1.0em; text-indent: 0px; padding-bottom: 0; margin-bottom: 0; }h2.objectives-subhead { margin-left: 0px; padding-top: 1.0em; text-indent: 0px; margin-bottom: 0.6em; }#resourcespage ul { margin-top: 1.0em; }#resources ul { margin-top: 0.6em; }.referencelabel { text-decoration: none; white-space: normal; color: #a0a0a0; width: 400px; font: normal normal bold 2.2em Arial,Helvetica,sans-serif; background: transparent; }#main-box dl { margin-top: 10px; }.table-box { padding-top: 0px; margin-bottom: 0px; margin-left: 2px;}#main-box .table-box { margin-top: 0px; width: 100%; }body, #resources, h1, h2, .referencelabel, .referencetitle, #body-content, .holder, .intro-bodytext, .bodytext, .picture-caption, #title-box-article, .subcategory, .subhead-resources-bodytext, .indented-resources-bodytext, .title-article, h2.article-subheading, h3.article-subheading, h4.article-subheading, ul ol { margin-left: 0px; padding-left: 0px; }ul ul, ul ol { margin-left: 20px; }.holder { page-break-before: auto; padding-top: 0px; font-size: 100%; }#definitions { page-break-before: auto; }#main-box p, #main-box ul { margin-top: 0px; margin-bottom: 10px; width: 100%; }.printout-resourcetype, .screenlabel, #main-box .form-caption, #printer-text, noscript, input, #bottomlinks, p.backtotop, #toc { display: none; }#resources div.copyright-claim p{ display: block; text-align: center; }body { background: 0; }#fullpage-box { width: 90%; }.objective-heading { width: 100%; }.objective-list { margin-bottom: 0.6em; }dl { margin-left: 0px; width: 95%; margin-top: 30px; }dt { margin-left: 0px; margin-right: 15px; width: 90%; }.feature-box { margin-left: 0px; width: 95%; }.feature-content-container { margin-left: 0px; width: 90%; padding-bottom: 1.0em; }.code-paragraph { margin-left: 0px; width: 90%; padding: 15px 20px; }.top-link { display: none; }.syntax-paragraph { margin-left: 15px; width: 90%; }li.objective { margin-left: 55px; width: 90%; list-style-type: square; list-style-position: outside; text-align: left; }#title-box, #objective-box { margin-left: 0px; }.objective-text, #content-box, h2.division, p.bodytext, .feature-label { margin-left: 0px; width: 100%; }dd { margin-left: 20px; }.picture-box { margin-left: 0px; text-align: left;}.picture-box img { margin-left: 0px; }h3.heading-3, h4.heading-4 { margin-left: 0px; }.supplement-instruction { margin-left: 1.0em; }}/* DO NOT DELETE EXTRA CHAIN BRACKET ON PREVIOUS LINE */

/* -------------------------------------------------- */

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/elo.xml

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/imsmanifest.xml IMS Content 1.0

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/ims_contentv1p0.dtd

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lhslogo.gifSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lhslogo.html

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/flash/navigation.swfSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/misc/aitt0611_001.gifSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/misc/aitt0611_002.gifSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/misc/background.gifSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/misc/core_html.css/* STYLES FOR CONTENT ON SCREEN */






/* -------------------------------------------------- */


@media print {


/* -------------------------------------------------- */

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/misc/thumbs.dbSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/pages/article_nav.html

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/pages/index.htmlSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/lp1/pages/nito.html

This page contains a JavaScript function that prints out the current frame document. To print out the document without using JavaScript, you need to press Control P.

|Print|Contents|

Access control, auditing, and event logging

Abstract

This article discusses using access control, auditing, and event logging to ensure system and data security in an organization. It describes the features available in Windows XP to monitor and control user privileges to secure resources on the system.

Introduction

It is important for technicians and administrators to keep computers up to date and ready to handle security threats such as unauthorized data access. Microsoft releases service packs, hot fixes, patches, and critical updates to fix any security and reliability issues in their operating systems. You can use the Microsoft Windows Update feature to keep your operating system protected against such threats.

Hackers can breach security through the unsecured elements of your operating system and cause damage to your computer. To protect your system from unauthorized access, you should follow this set of general rules:

every user accessing the system should have unique login credentialsusers should have access to only those resources they requireaccess rights and permissions should be assigned only to groups, and users should be made members of specific groups based on their requirementsaccess to administrative tools and utilities should be controlled and monitored

Rights and permissions

In Windows XP, the access to each system resource, such as a file or folder, is at the discretion of the user who "owns" that resource. The creator of that resource is deemed to be the owner of that resource, and the owner can decide who can or cannot access the resource. The exceptions here are computer administrators who can take ownership of a resource not created by them.

Windows XP provides two kinds of access privileges:

permissionsrights

A permission enables a user to access a resource in a predefined manner. For example, you can assign a user the permission to modify a particular file or access a particular folder. Permissions for any resource are assigned to users from the property dialog box of that resource.

Figure 1: Resource permissions

A right enables a user to perform a particular action throughout the system. For example, you can assign a user the right to restore files and directories on the system. Administrators can assign rights from the Local Security Policy console in the Administrative Tools folder.

Figure 2: Local Security Policy

User accounts

Administrators assign every user a user account, which includes a username and a password. The user logs on to the system using the user account information.

Windows monitors, controls, and restricts access to system resources for each user account based on the permissions and rights assigned by the administrator and owner of the resource. Apart from user accounts, Windows XP provides two built-in accounts with predefined rights and permissions:

Administrator Guest

The Administrator account has full rights over the entire system. This account can create other user accounts and is responsible for managing the computer.

The Guest account is designed for a visitor or an infrequent user to log in to the system and use it in a restricted manner. By default, the Guest account is disabled when Windows XP is installed.

Account types

Windows enables you to define each user account as a specific account type. An account type in Windows XP is a group of user accounts with specific common privileges. When managing a large number of users in an organization, keeping track of privileges assigned to each user may be difficult. In addition, you double your effort when you individually manage multiple user accounts with shared needs. Therefore, you should avoid assigning privileges to individual user accounts.

Instead, you should create a group or groups for users having the same needs and then make the user accounts members of that group. The privileges assigned to the group automatically flow to the user accounts that are group members. At any time a user account can belong to more than one group, and the user has the collective privileges assigned to all groups of which it is a member.

The four user account types defined in Windows XP are

computer administratorlimitedguestunknown

The members of the "Administrators" group in Windows XP are classified as computer administrator accounts. Members of the Administrators group have more control over the system than any other users and can perform all tasks on a system. To add or remove a Windows component, you must be a member of this group.

The members of the "Users" group are classified as limited accounts because they have limited privileges on a computer. They are able to

change their own account passworduse installed applicationscreate, modify, and delete files in their foldersview permissions on systems not limiting file sharing data access view files in shared folders

The members of the "Guest" group are classified as guest accounts. These accounts have similar privileges to limited accounts except that guest accounts cannot create a password for their own accounts.

Any user account that is not a member of Administrators, Users, or Guest groups is classified as an unknown account. An unknown account is usually created if a computer has been upgraded from an earlier version of Windows and the operating system is not able to categorize the user accounts created on the older Windows operating system.

In addition to creating Administrators, Users, and Guest groups, a fresh installation of Windows XP Professional creates six groups with predefined rights and permissions.

Table 1: List of predefined groups in Windows XPGroupDescription

Backup OperatorsMembers of this group can back up and restore files and folders. They can back up and restore even those folders and files for which they do not have access permissions.

Power UsersMembers of this group have many, but not all, of the Administrators group privileges. They can manage local printers, share folders, and create local users and groups. They cannot perform these administrative tasks:

take ownership of filesback up or restore filesload or unload driversmanage security and auditing logs

HelpServicesGroupMicrosoft and computer manufacturers use this group to provide Remote Assistance. Using this group and with the user's permission, technical support personnel can remotely connect to the user's computer.

Network Configuration OperatorsMembers of this group have the privileges to set up and configure networking components.

Remote Desktop UsersMembers of this group can connect to the computer using the Remote Desktop utility.

ReplicatorMembers of this group can manage the replication of files on the server, workstation, or domain.

Computer security

You can enhance the security of your computer by

creating user profileslimiting file sharing data accessrestricting physical access to hardware and software in your organizationusing a proper auditing or logging policy

Creating user profiles

When you have multiple users sharing the same machine, Windows XP enables you to limit access by creating user profiles. A user profile contains all of a user's information such as the desktop settings, personal registry settings, files in the My Documents folder, and network shortcuts.

A profile gets created when a user logs on to a computer for the first time. By default, local system user profiles are stored in the path %SystemDrive%\Documents And Settings\%User Account Name%.

Users have complete access to their individual user profiles, but they cannot access profiles belonging to other users unless they have administrative privileges.

You can restrict access on shared computers by creating one account per user. And if information needs to be shared amongst users, it can be placed in shared folders.

You should use a combination of group policies and folder permissions to ensure that users cannot edit system files.

Simple File Sharing

Windows XP offers a feature called Simple File Sharing, which enables you to set common security arrangements for sharing resources on the system. It enables you to set resource access for local as well as network users.

Network users who connect to a computer using Simple File Sharing are authenticated using the Guest account of the computer. The network users have the privileges and permissions specifically granted to the Guest account.

Using Simple File Sharing, you set permissions at the folder level not at the file level. This type of resource sharing allows only limited configurations. You can

share folders with all local usersshare folders with network usersprevent other users from viewing one or more of your private folders

In Windows XP Professional, you can disable Simple File Sharing to configure specific Access Controls Lists (ACLs) for shared resources. ACLs provide you with greater control over shared information because you can specifically configure which users can access resources and what level of access they have.

Physical security

Physical security is the need to protect resources from physical threats. These threats can cause damage to the assets of an organization.

Preventing unauthorized physical access to the hardware and software forms a major part of implementing physical security in an organization. Ideally all servers in an organization should be placed in a secure area. However, if the equipment needs to be physically accessed, you should provide restricted access to the equipment rooms by implementing smart card or biometric systems, or using a door requiring a key code. The servers, CDs, and backup tapes should be physically secured behind lock and key to prevent damage to the devices as well as to the data contained in them. You should also devise a plan to prevent unauthorized access to wireless signals and provide proper protection to wireless networks.

Physical security also involves planning for protection from environmental threats. You should consider all natural risks, such as earthquakes or floods, in your area and plan to counter them. If the data or the operation is of a critical nature, you should keep backups in different locations to ensure data protection and continued operation.

In addition to planning for natural threats, you should plan for providing uninterrupted power supply to counter electric outages. You should also take measures to prevent damage from fires.

You should consider the workplace environment when planning physical security. This includes the physical stability of the equipment room and conditions such as ventilation and temperature control.

Event logging and auditing

It is not sufficient to implement access control by creating user accounts and assigning specific privileges. You should have a comprehensive auditing strategy to ensure the security of systems and data. You should decide which events need to be logged and audited. Auditing tracks the success or failure of a specific event such as accessing a specific directory. When auditing is enabled for an event, successful or failed attempts are logged in the Security log file in Event Viewer.

Implementing a system of auditing helps to

create a baseline for the performance of networks and computersdetect whether there is an attempt to compromise the security of a systemdetermine which systems and data have been tampered with either during or after a security breach

By regularly monitoring logs, you can help prevent damage to networks and computers. You should audit only the most important events. So it's a good idea to start off with only auditing a few things and expanding your auditing solution as needed.

Summary

Windows XP enables you to assign specific rights and permissions to users on a system. You use the Administrator account to create user accounts.

Windows XP classifies each user account as an account type to define the membership of the user to a security group. Predefined groups created in Windows XP have predefined rights and privileges. You can assign individual user accounts to these groups for the rights and permissions to accrue to the users.

You ensure physical security of the systems and data in your organization by providing users with controlled physical access to the systems. Physical security also takes care of protection against natural and workplace calamities.

As a comprehensive security strategy, you should plan for specific events to be logged by the system and define measures to undertake the auditing of these events.

Table of Contents

|Top of page|

|Abstract|

|Introduction|

|Rights and permissions|

|User accounts|

|Account types|

|Computer security|

|Summary|

Copyright 2007 SkillSoft. All rights reserved.

SkillSoft and the SkillSoft logo are trademarks or registered trademarks

of SkillSoft in the United States and certain other countries.

All other logos or trademarks are the property of their respective owners.

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/obj.css#idLearningObjective{ BACKGROUND-COLOR: white; FONT-SIZE: 100%; LEFT: 0px; PADDING-LEFT: 10px; POSITION: absolute; TOP: 0px; WIDTH: 394px;}#idHeading1{ COLOR: #ff9900; FONT-FAMILY: Arial, Verdana, Helvetica; FONT-SIZE: 100%; PADDING-LEFT: 40px;}#idBodyText{ COLOR: black; FONT-FAMILY: Arial, Verdana, Helvetica; FONT-SIZE: 80%; MARGIN-BOTTOM: 1px; PADDING-BOTTOM: 1px; PADDING-LEFT: 40px; PADDING-RIGHT: 20px; PADDING-TOP: 5px;}#idLearningObjectiveForUnix{ BACKGROUND-COLOR: white; FONT-SIZE: 16px; LEFT: 0px; PADDING-LEFT: 10px; POSITION: absolute; TOP: 0px; WIDTH: 394px;}#idHeading1ForUnix{ COLOR: #ff9900; FONT-FAMILY: helvetica; FONT-SIZE: 15px; PADDING-LEFT: 40px;}#idBodyTextForUnix{ COLOR: black; FONT-FAMILY: helvetica; FONT-SIZE: 13px; MARGIN-BOTTOM: 1px; PADDING-BOTTOM: 1px; PADDING-LEFT: 40px; PADDING-RIGHT: 20px; PADDING-TOP: 5px;}

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/obj.html

After completing this topic, you should be able to identify the characteristics of access control, auditing, and event logging.

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/objver.inf[245926]MajorVersion=1MinorVersion=00

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/rhslogo.html

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/article/rhslogo.jpgSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/assessment/ims_contentv1p0.dtd

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/assessment/lp1/qti.xml Which type of access privilege allows users to perform system-wide operations on the computer? Limited Permissions Rights Unknown Option3 1 Correct. Incorrect. The correct option is highlighted. Where is the user information, such as the users' desktop settings, and files in the My Documents folder stored? Administrator group Backup Operators Replication group User profiles Option4 1 Correct. Incorrect. The correct option is highlighted. Identify the reasons to have event logging and auditing on your system. It allows you to assign rights and permissions It helps to detect whether the system security is being compromised It helps to ensure data backup on the system It helps to set a baseline to measure system performance Option2 1 Option4 1 Correct. You have not made any correct choices. The correct options are highlighted. Identify the actions using which you can implement physical security in your network. Prevent installation of antivirus software Store data in an alternate physical location Remove CD drive from computers Use smart cards to access server rooms Option2 1 Option4 1 Correct. You have not made any correct choices. The correct options are highlighted.

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/assessment/lp1/rule.xml 4 100% 4 yes all yes yes test yes no 4 100% 4 yes all no yes test yes no 4 100% 4 yes none no yes test no no

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/assessment/rule.xml 100% yes all yes yes test yes no 100% yes all no yes test yes no 100% yes none no yes test no no

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/assessment/test.xml

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/assessment/test_manifest.xml IMS Content 1.0

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245926/eng/assessment/uae.htmlSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/assessment/ims_contentv1p0.dtd

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/assessment/lp1/qti.xml You have a Windows XP computer with the remote desktop settings enabled. You want to access this computer remotely, but your security settings do not allow you to access it. What can you do? Change the password policy so that you can remotely log on to your computer Disable the Windows Firewall on your Windows XP computer Enable a Windows Firewall exception to allow remote log on Option3 1 Correct. Incorrect. The correct option is highlighted. You are configuring user rights options on your computer. Which of these are true for Windows XP? You can assign or deny a user right to user groups You can create new user rights You cannot modify the default user right settings Windows XP assigns some user rights to user groups by default Option1 1 Option4 1 Correct. You have not made any correct choices. The correct options are highlighted. 2 Which policies in Windows XP allow you to configure settings of a local computer? IPSec Policies Password Policies Security Options Option3 1 Correct. Incorrect. The correct option is highlighted. Which statements are true for configuring security in Windows XP? FAT32 file system provides greater security than NTFS Windows Firewall automatically configures certain user settings that cannot be modified Windows XP allows you to modify wireless authentication and encryption mechanisms Windows XP allows you to set different user rights to different user groups Option3 1 Option4 1 Correct. You have not made any correct choices. The correct options are highlighted.

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/assessment/lp1/rule.xml 4 100% 4 yes all yes yes test yes no 4 100% 4 yes all no yes test yes no 4 100% 4 yes none no yes test no no

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/assessment/rule.xml 100% yes all yes yes test yes no 100% yes all no yes test yes no 100% yes none no yes test no no

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/assessment/test.xml

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/assessment/test_manifest.xml IMS Content 1.0

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/assessment/uae.htmlSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/thin/background.gifSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/thin/core_html.css/* STYLES FOR CONTENT ON SCREEN */






/* -------------------------------------------------- */


@media print {


/* -------------------------------------------------- */

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/thin/elo.xml

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/thin/imsmanifest.xml IMS Content 1.0

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/thin/ims_contentv1p0.dtd

Skill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/thin/js/emptybase.swfSkill.Soft.Managing.IT.Security.Training-LiB/contentLIB4/cbtlib/245880/245927/eng/thin/js/flash.js// Copyright 2000 SmartForce. Ghost Flash Template//build 43 ssl release// GLOBAL VARIABLESns4 = (document.layers)? true:falseie4 = (document.all)? true:false

var igDemo = 0;

var InternetExplorer = navigator.appName.indexOf("Microsoft") != -1;

var player = null;

var levelCount = 0;

var audioButton;

var keyDo=0;

var firsttime = "yes";

var userinput="false";

var firstKeyboard = "true";

var visibilityIndex = 7;

// fullyLoaded is set to 1 if focus rect is loadedvar fullyLoaded=0;

sfGhost=parent.sfGhost;var playerBase=sfGhost.returnPlayerbase();

var sProtocol = "http";if(sfGhost.usingSSL){sProtocol = "https";}

function keyDown(){if(window.event.keyCode == 116) // remap F5 so it doesn't refresh screen{window.event.keyCode=505;return false;}}if(navigator.appName.indexOf("Microsoft") != -1)document.onkeydown=keyDown;

//*******************************************************************// Write the flash page from here in case we need to change the parameters in a hurry..kieran//*******************************************************************function ReturnHTML() {fHTML="";fHTML+="";fHTML+="This frame contains an empty flash movie";fHTML+="";fHTML+="";fHTML+="";fHTML+="";fHTML+="";fHTML+="";fHTML+="";fHTML+="";//fHTML+="In order to run the lesson you've selected, you will need to install a more recent version of the Macromedia Flash player than is currently installed. You can either download the correct version from Macromedia's web site or contact your Network Administrator for assistance.";fHTML+="";fHTML+="";return fHTML;}

function getPaths(){var functionpath="../../js/functions.swf";var qfunctionpath="../../js/q_functions.swf";var prefpath="../../preferences/p.xml";var qprefpath="../../preferences/q.xml";var iqfunctionpath="../../js/iq_functions.swf";var maskpath = "../../preferences/mask.swf";var preloadxmlpath = "../../js/preloadxml.swf";var qpreloadxmlpath = "../../js/qpreloadxml.swf";var woFlashmovDisplay = document.woFlashmovDisplay;var levelNum = "_level" + levelCount + "/";//send them up!!!woFlashmovDisplay.SetVariable(levelNum + ":functionpath", functionpath);woFlashmovDisplay.SetVariable(levelNum + ":qfunctionpath", qfunctionpath);woFlashmovDisplay.SetVariable(levelNum + ":iqfunctionpath", iqfunctionpath);woFlashmovDisplay.SetVariable(levelNum + ":prefpath", prefpath);woFlashmovDisplay.SetVariable(levelNum + ":qprefpath", qprefpath);woFlashmovDisplay.SetVariable(levelNum + ":maskpath", maskpath);woFlashmovDisplay.SetVariable(levelNum + ":preloadxmlpath", preloadxmlpath);woFlashmovDisplay.SetVariable(levelNum + ":qpreloadxmlpath", qpreloadxmlpath);}

//*******************************************************************// TEMP IG INIT NAV//*******************************************************************function doInitIgNav(){doStandardIgNav();}

function doInitAudioIgNav(){doStandardAudioIgNav();}

function doStandardIgNav(){var state;var woFlashmovDisplay = document.woFlashmovDisplay;var levelNum = "_level" + levelCount + "/";var state = woFlashmovDisplay.GetVariable("_level0/:keyboardbox");// clear and set up inital navbar state (see navigation documentation)sfGhost.sfClearButtons();

sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("spacer");sfGhost.sfLoadButton("back");if (audioButton) {sfGhost.sfLoadButton("audiof");sfGhost.sfSetState("audiof", "enabled");}//next if else state var will be replaced by johns keyboard state var from ghost for last build//if (state == "off"){

if(sfGhost.sfKeyboardState==false){sfGhost.sfLoadButton("keyboardf");sfGhost.sfSetState("keyboardf", "enabled");}else if (sfGhost.sfKeyboardState==true){woFlashmovDisplay.SetVariable("_level0/:keyboardbox", "on");firstKeyboard = "false";sfGhost.sfLoadButton("keyboardo");sfGhost.sfSetState("keyboardo", "enabled");}sfGhost.sfSetState("back", "enabled");sfGhost.sfSetState("spacer", "enabled");sfGhost.sfSetState("forward", "enabled");}

function doStandardAudioIgNav(){var state;var woFlashmovDisplay = document.woFlashmovDisplay;var levelNum = "_level" + levelCount + "/";var state = woFlashmovDisplay.GetVariable("_level0/:keyboardbox");// clear and set up inital navbar state (see navigation documentation)sfGhost.sfClearButtons();

sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("playf");sfGhost.sfLoadButton("replay");sfGhost.sfLoadButton("back");sfGhost.sfLoadButton("audioo");if(sfGhost.sfKeyboardState==false){sfGhost.sfLoadButton("keyboardf");sfGhost.sfSetState("keyboardf", "enabled");}else if (sfGhost.sfKeyboardState==true){woFlashmovDisplay.SetVariable("_level0/:keyboardbox", "on");firstKeyboard = "false";sfGhost.sfLoadButton("keyboardo");sfGhost.sfSetState("keyboardo", "enabled");}

sfGhost.sfSetState("back", "enabled");sfGhost.sfSetState("replay", "enabled");sfGhost.sfSetState("audioo", "enabled");sfGhost.sfSetState("playf", "enabled");sfGhost.sfSetState("forward", "enabled");}//*******************************************************************// AUDIO FUNCTIONS ADDED 2/11/01//*******************************************************************

function doInitAudioNav(){doStandardAudioNav();}

//*******************************************************************

function doInitNav(){doStandardNav();}

function clearNav(){//clears nav when preloader runssfGhost.sfClearButtons();}

function doStandardNav(){

// clear and set up inital navbar state (see navigation documentation)sfGhost.sfClearButtons();

sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("spacer");sfGhost.sfLoadButton("back");if (audioButton) {sfGhost.sfLoadButton("audiof");sfGhost.sfSetState("audiof", "enabled");}sfGhost.sfSetState("back", "enabled");sfGhost.sfSetState("spacer", "enabled");sfGhost.sfSetState("forward", "enabled");}

//*******************************************************************// AUDIO FUNCTIONS ADDED 2/11/01//*******************************************************************

function doStandardAudioNav(){// clear and set up inital navbar state (see navigation documentation)sfGhost.sfClearButtons();

sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("playf");sfGhost.sfLoadButton("replay");sfGhost.sfLoadButton("back");sfGhost.sfLoadButton("audioo");

sfGhost.sfSetState("back", "enabled");sfGhost.sfSetState("replay", "enabled");sfGhost.sfSetState("audioo", "enabled");sfGhost.sfSetState("playf", "enabled");sfGhost.sfSetState("forward", "enabled");}

function doAudioNavReset(){

sfGhost.sfSetState("forward", "enabled");}

function forwardFlash(){sfGhost.sfSetState("forward", "flash");}

//*******************************************************************

function questionInit(buttonSet){//called from questions decides on hint or notswitch(buttonSet){case "flat":case 'flat':doStandardNav();break;case "quest":case 'quest':doQuestNav();break;case "questaudio": //******** AUDIO ADDED 2/11/01case 'questaudio':doQuestAudioNav();break;case "questhint": case 'questhint':doQuestNav("hint");break;case "questaudiohint": //******** AUDIO ADDED 2/11/01case 'questaudiohint':doQuestAudioNav("hint");break;case "grabquest":case 'grabquest':doGrabQuestNav();break;case "grabquesthint":case 'grabquesthint':doGrabQuestNav("hint");break;case "grabquest":case 'grabquest':doGrabQuestAudioNav();break;case "grabquesthint":case 'grabquesthint':doGrabQuestAudioNav("hint");break;}

}

//*******************************************************************// AUDIO FUNCTIONS ADDED 2/11/01//*******************************************************************

function doQuestAudioNav(hint){

sfGhost.sfClearButtons();

sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("playf");sfGhost.sfLoadButton("spacer");if (hint) {sfGhost.sfLoadButton("hint");}sfGhost.sfLoadButton("replay");sfGhost.sfLoadButton("back");sfGhost.sfLoadButton("audioo");

if (hint) {sfGhost.sfSetState("hint", "enabled");}sfGhost.sfSetState("back", "enabled");sfGhost.sfSetState("replay", "enabled");sfGhost.sfSetState("playf", "enabled");sfGhost.sfSetState("spacer", "enabled");sfGhost.sfSetState("audioo", "enabled");sfGhost.sfSetState("forward", "enabled");}

//*******************************************************************

function doQuestNav(hint){sfGhost.sfClearButtons();

sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("spacer");if (hint){sfGhost.sfLoadButton("hint");}sfGhost.sfLoadButton("back");if (audioButton) {sfGhost.sfLoadButton("audiof");sfGhost.sfSetState("audiof", "enabled");}sfGhost.sfSetState("back", "enabled");if (hint){sfGhost.sfSetState("hint", "enabled");}sfGhost.sfSetState("spacer", "enabled");sfGhost.sfSetState("forward", "enabled");

}

function doGrabQuestNav(hint){var state;var woFlashmovDisplay = document.woFlashmovDisplay;var levelNum = "_level" + levelCount + "/";var state = woFlashmovDisplay.GetVariable("_level0/:keyboardbox");


sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("showme");if (hint){sfGhost.sfLoadButton("hint");}sfGhost.sfLoadButton("back");

if (audioButton) {sfGhost.sfLoadButton("audiof");sfGhost.sfSetState("audiof", "enabled");}//next if else state var will be replaced by johns keyboard state var from ghost for last buildif (sfGhost.sfKeyboardState == false){sfGhost.sfLoadButton("keyboardf");sfGhost.sfSetState("keyboardf", "enabled");}else if (sfGhost.sfKeyboardState == true){sfGhost.sfLoadButton("keyboardo");sfGhost.sfSetState("keyboardo", "enabled");}sfGhost.sfSetState("back", "enabled");if (hint){sfGhost.sfSetState("hint", "enabled");}sfGhost.sfSetState("showme", "enabled");sfGhost.sfSetState("forward", "enabled");}

function doGrabQuestAudioNav(hint){var state;var woFlashmovDisplay = document.woFlashmovDisplay;var levelNum = "_level" + levelCount + "/";var state = woFlashmovDisplay.GetVariable("_level0/:keyboardbox");


sfGhost.sfLoadButton("forward");sfGhost.sfLoadButton("playf");sfGhost.sfLoadButton("showme");if (hint){sfGhost.sfLoadButton("hint");}sfGhost.sfLoadButton("replay");sfGhost.sfLoadButton("back");sfGhost.sfLoadButton("audioo");

//next if else state var will be replaced by johns keyboard state var from ghost for last buildif (sfGhost.sfKeyboardState == false){sfGhost.sfLoadButton("keyboardf");sfGhost.sfSetState("keyboardf", "enabled");}else if (sfGhost.sfKeyboardState == true){sfGhost.sfLoadButton("keyboardo");sfGhost.sfSetState("keyboardo", "enabled");}sfGhost.sfSetState("audioo", "enabled");sfGhost.sfSetState("replay", "enabled");sfGhost.sfSetState("playf", "enabled");sfGhost.sfSetState("back", "enabled");if (hint){sfGhost.sfSetState("hint", "enabled");}sfGhost.sfSetState("showme", "enabled");sfGhost.sfSetState("forward", "enabled");}

//*******************************************************************// function to take care of form based q's//*******************************************************************

function formMxySxyJudging() {

var woFlashmovDisplay = document.woFlashmovDisplay;var levelNum = "_level" + levelCount + "/";n = woFlashmovDisplay.GetVariable(levelNum + ":numberofoptions");var x=0;for (x=0; x0){var r = woFlashmovDisplay.GetVariable(levelNum + ":numberofradio");var foils = true;}else{r = n;}answerArray.length = m;var x=0;//for (x=0; x