Operating system and web browser updates are applied via a central distribution. Client PC systems are not allowed to act as servers. Operating systems and web browsers use 128-bit SSL encryption. All supported software is reviewed by engineers before installation. All referenced PCs are scanned daily for suspicious network port usage.
Outdated software is phased out and prevented using centrally administered removal techniques.
There is no access to the machine until a user logs in. Users logged in to Windows 2000 machines don't have full rights to change any file on the PC, including system files. This is a centrally enforced system policy, designed to prevent accidental user mistakes as well as potential trojan horse programs that run without user knowledge. Windows 2000 systems use Kerberos login encryption.