---
# System prepended metadata

title: Quals Checklist

---

# Quals Checklist

- Read the ReadMe
- Do the forensics questions
- Open up lusrmgr.msc and disable bad users.
- Disable and rename the default accounts
- Remove unauthorized users from the administrator group
- Change everyone's passwords
- Configure RDP depending on the readme
    - (Turn on NLA if RDP is enabled)
- Make sure critical services are running
- Turn on windows firewall
- Turn on windows defender
- Turn on smartscreen and UAC
- Open task scheduler and check for bad tasks
- Turn on automatic updates for windows
- Disable network shares
- Download malwarebytes and do a quick scan
- Make sure the hosts file is empty
- Download autoruns and check for bad things
- Use "Everything" to look for media files of any type
- Remove unauthorized software
- Update all of the remaing software to the latest version
- Set default programs to what the readme says
- Remove bad features (such as telnet server)
- Enable automatic updates
- Go into services and disable insecure services (such as remote registry and server)
- Enable a secure password and lockout policy

# Let Aiden or Michael R know to do group policy
