Protecting Windows XP System Account Security 3 Coup

  
Security is not an easy task. Some users who set the account password too short and do not change the password for a long time are important killers that affect account security. But now we are technically limited to these general users, that is to use the magical tools of group strategy.
Open the Run dialog in the Start menu and type "Gpedit.msc" to open the Group Policy Editor, and then navigate to "Local Computer Policy" and then click on the "Local Computer Policy" & ——“Computer Configuration”——&ldquo ;Windows Settings”——“Security Settings”——“Account Policies”——“Password Policy>, you will find six settings on the right for passwords. First double-click "The password must meet the complexity requirements", set it to "already enabled", the password set by the user after the item is enabled can not be simple 111, 123, abc and the like. Then double-click "Last password length", and set its value to 6 or above, which means that the password must be set to 6 characters in the shortest time; another important setting is "The password has the shortest retention period." ”, for example, we set it to 15 days, so when it reaches 15 days, the system will automatically remind us to change the password, which will help the password.
Double encryption for your account
I believe many of my friends have set up complex passwords for their accounts, but they still always worry about passwords being cracked by others. In fact, a friend who is worried about this can set double encryption for the account.
Click the "Start” button, open the “Run” dialog box in the menu that appears, enter “syskey”Enter to open “guarantee Windows XP account database security" window, this operation It is irreversible. Once encryption is enabled, it cannot be disabled. If we directly select the “Enable Encryption” item and click the “OK” button, the program has double encryption for the account, but this encryption process is correct. The user is transparent.
If you want to experience this double encryption function further, you can click the “Update” button to open the "Startup Password" window, where there is a total of "Startup Password" and "System" Password & rdquo; two options, if you choose & ldquo; start password & rdquo; you need to set a password, so you must enter this password before you log in to Windows XP before you can choose to log in to the account; in the "system generated password" option There are two more options. If you select "Save boot password on this machine", then the program only completes the encryption process in the background. You don't need to enter any password when logging in, because the password is saved inside the computer, if you If the security requirements are relatively high, you can choose to “save the startup password on the floppy disk” option, so click the “OK” button to prompt you to put a floppy disk in the floppy drive. After the creation is completed, a StartKey.Key file will be generated on the floppy disk. After each boot, the floppy disk must be placed in order to log in. The system has a key disk that can be carried with you.
Special note: If you choose to save the startup password on the floppy disk, it is recommended that you re-create a spare disk, and also need to verify the files on the floppy disk when switching from this encryption mode to other modes.
Forgetting passwords is not afraid.
Everything is relative. Set a complicated password for the account. If the password is forgotten any day, then you can't stop others but block yourself in the "door" It is terrible. In fact, as long as we build a password reset disk for our own account, we can do everything.
Go to the Control Panel and double-click the “User Account” item. In the window that opens, click the account name for which you want to create a password reset disk. Go to the interface shown and click on the left side“related tasks” Under the "block a forgotten password", this will "forgot password guide", welcome window, click directly "next", prompt us to insert a blank formatted floppy disk in the floppy drive, continue to click “ Next Step> The wizard will ask us to enter the password for the current account and click “Next” to start creating a password reset disk.
If you enter the wrong password during login, the system will automatically prompt whether to reset the password. If you confirm, you need to insert the floppy disk at the prompt of the wizard and set a new password.
How, through the three tips described above, your account should be insured, whether it is to guard against others or worry that you forget complex passwords can be all right.

Copyright © Windows knowledge All Rights Reserved