Limit settings for restricting user account power

When it comes to the words "system security", I believe that most people will think about various firewall tools, anti-virus software, etc., and they will think that as long as they exist in the system, system security will be Will sit back and relax. In fact, the security of the system relies solely on “defense” and it is also necessary to have sufficient security awareness. For example, when we discuss the trade-off between system security and convenience, tilting the balance to convenience sometimes has disastrous consequences. Therefore, sacrificing certain convenience and strengthening system security by restricting user account power should be a noteworthy and unavoidable issue. Let's explore this unavoidable key today.

Hidden

In the fifth issue of the 2005 issue of "System Security starts from the account settings", the author has proposed: change the user login and "user account" Logout method & quoquo; task settings, cancel the "Use welcome screen" option to log in to the user. However, it is sometimes cumbersome to enter a username and password each time you log in. In fact, you can completely use the welcome screen —— just hide some user accounts (this article is for windows 2000/XP system). Specifically, you can modify the registry:

1. Run the “regedit” command at the Start & rdquo; menu to run the Registry Editor;

2 Open HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\SpecialAccounts\\UserList, create a new DWORD value, set the name of this value to the account name you want to hide, and set the value to 0.

As such, your hidden accounts (such as administrator accounts) will not appear on the welcome screen. To log in to an account that is not on the welcome screen, press Ctrl+Alt+Delete twice to display the “Log in to Windows” dialog box and enter your username and password. However, accounts hidden in this way can't use the fast user switching feature, because pressing Ctrl+Alt+Delete twice can only work if no one else is logged into the computer.

The author hides his administrator account in the bedroom, leaving only a public account on the welcome screen. Students only need to enter a password to enter the system. This is convenient for the classmates, but also prevents the good guys from asking me the password of the administrator.

Enforce access to specific accounts with automatic logins

Of course, you can do even more, using automatic logins that don't seem to be safe. In this way, you can force other users to enter a particular account without inciting their curiosity about guessing the passwords of other accounts. Specific method:

1. Run the control userpasswords2 command at the "Start” menu"Run", enter the "User Account", in the "User" tab, cancel &ldquo ; to use the machine, the user must enter a user name and password & rdquo; box, and click & ldquo; determining & rdquo; (FIG. 1);

user account

2. Thereafter Windows will pop up a prompt box (Figure 2) that asks you to enter the username and password of the account used to log in automatically each time the computer starts.

Windows will pop up a message box

Of course, also in \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Winlogon primary key HKEY_LOCAL_MACHINE make other settings to further control automatic logon process: on a Page 123 Next page Total 3 pages