Windows XP account security three measures

Account password intelligent

Security to protect your own account is not an easy task, some careless users set the account password too short, do not change the password for a long time Etc. are important killers that affect account security, but now we are technically limited to these general users, which is the magical tool of using Group Policy.

Open the Run dialog in the Start menu and type ">Gpedit.msc" to open the Group Policy Editor and navigate to "Local Computer Policy" "——“Computer Configuration”— —“Windows Settings”——“Security Settings”——“Account Policies”——“Password Policy>, you will find six passwords on the right Set up the project. First double-click "The password must meet the complexity requirements", set it to "already enabled", the password set by the user after the item is enabled can not be simple 111, 123, abc and the like. Then double-click "Last password length", and set its value to 6 or above, which means that the password must be set to 6 characters in the shortest time; another important setting is "The password has the shortest retention period." ”, for example, we set it to 15 days, so when it reaches 15 days, the system will automatically remind us to change the password, which will help the password to be safe (Figure 1).

Figure 1

Double Encrypting Accounts

I believe many of my friends have set up complex passwords for their accounts, but they still always worry about passwords being cracked by others. In fact, a friend who is worried about this can set double encryption for the account.

Click the "Start” button, open the “Run” dialog box in the menu that appears, type “syskey”Enter to open “guarantee Windows XP account database security”window This operation is irreversible. Once encryption is enabled, it cannot be disabled. (Figure 2) Here, if we directly select the "Enable Encryption" item and click the "OK" button, the program has been completed for the account. Double encryption, but this encryption process is transparent to the user

Figure 2

If you want to experience this double encryption function further, you can click on it in Figure 2. Update the ” button to open the "Startup Password" window (Figure 3). Here, there are a total of "Startup Password" and "System Generated Password" options. If you select "Start Password", then select "Start Password" You need to set a password yourself, so you must enter this password before you can log in to Windows XP before you can log in to the account; in the "System generated password” option There are two more options. If you select "Save boot password on this machine", then the program only completes the encryption process in the background. You don't need to enter any password when logging in, because the password is saved inside the computer, if you If the security requirements are relatively high, you can choose to “save the startup password on the floppy disk” option, so click the “OK” button to prompt you to put a floppy disk in the floppy drive. After the creation is completed, a StartKey.Key file will be generated on the floppy disk. After each boot, the floppy disk must be placed in order to log in. The system has a key disk that can be carried with you.

Figure 3

Figure 4

Special Note: If you choose to save the startup password on the floppy disk, it is recommended that you create another spare disk again. When the encryption mode is switched to other modes, it is also necessary to verify the files on the floppy disk.

Forgetting passwords is not afraid

Everything is relative, and a complicated password is set for the account. In case the password is forgotten someday, when you can't stop others, you will block yourself. The door is boring. In fact, as long as we build a password reset disk for our own account, we can do everything.

Go to the Control Panel and double-click the “User Account” item. In the window that opens, click the account name for which you want to create a password reset disk. Go to the interface shown in Figure 4 and click on the left. “ Related tasks& rdquo; under "Don't block a forgotten password", this will "forgot password wizard", welcome window, click directly "Next" & rdquo; prompt us to insert a blank format in the floppy drive The floppy disk, continue to click "Next", the wizard will ask us to enter the password of the current account (as shown in Figure 5) and then click "Next" to start creating a password reset disk.

Figure 5

If the password is entered incorrectly during login, the system will automatically prompt whether to reset the password. If confirmed, you need to insert a floppy disk at the prompt of the wizard and set a new one. The password can be.

How about, through the three techniques described above, your account should be insured, whether it is to guard against others or worry that you forget complex passwords can be all right.