System and method for protecting a security profile of a computer system

A system for locking down resources of computer systems, comprising:

• means for receiving a request for activating a security profile;
• means for modifying security settings of a computer system in response to said request;
• means for storing data indicative of said modified security settings;
• means for automatically determining when one of said security settings has changed from a first value to another value by periodically comparing said data to said security settings;
• and
• means for automatically changing said one security setting to said first value in response to a determination by said determining means that said one security setting has changed.

A method for locking down resources of computer systems, comprising:

• receiving a request for activating a security profile;
• modifying security settings of a computer system in response to said request;
• storing data indicative of said security settings, as modified by said modifying;
• automatically determining when one of said security settings has changed from a first value to another value by periodically comparing said data to said security settings;
• and
• automatically changing said one security setting to said first value in response to a determination in said determining that said one security setting has changed.

A computer system, comprising:

• memory;
• an operating system configured to analyze a machine state to control operation of said computer system, said machine state including a security setting associated with a resource of said computer system and indicating whether access to said resource is restricted, wherein said operating system is configured to analyze said security setting to control access to said resource;
• and
• a security application configured to modify said security setting based on a user input and to store, in said memory, data indicative of a state of said security setting, as modified by said security application, said security application configured to perform a comparison between said data and said security setting to detect an unauthorized change of said security setting, said security application further configured to automatically change said security setting based on said data in response to a detection of an unauthorized change of said security setting.