Windows XP account security three strokes

Windows XP account security three measures (a)

[original site] intelligent


account password to protect your account security is not an easy Things, some users who set the account password too short, do not change the password for a long time, etc. are important killers that affect account security, but now we are from Technology
to limit these users. That is the magical tool of using Group Policy.
Open the Run dialog box in the Start menu, enter "Gpedit.msc" to open the Group Policy Editor, and then browse to "Local Computer Policy" - "Computer Configuration" - "Windows Settings" - "Security Settings" - "Account Policy" - "Password Policy", you will find six settings on the right side of the password. First double-click the "Password must meet the complexity requirements" item, set it to "Enabled", after the item is enabled, the password set by the user can not be simple 111, 123, abc and the like. Then double-click the "password length minimum" and set its value to 6 or more, which means that the password set in the future must have 6 digits. The other important setting is "the minimum password retention period", for example We set it to 15 days so that when it reaches 15 days, the system will automatically remind us to change the password, which will help the password (Figure 1).

图一

Double encryption for accounts


I believe many of my friends have set up complicated passwords for their accounts. But still always worried that the password was cracked by others. In fact, a friend who is worried about this can set double encryption for the account.

Click the "Start" button, open the "Run" dialog box in the menu that appears, enter "syskey" and press Enter to open the "Security for Windows XP Account Database" window. This operation is irreversible. Once encryption is enabled, it can't be disabled (Figure 2). If we directly select the "Enable Encryption" item and click the "OK" button, the program has double encryption for the account, but the encryption process is for the user. It is transparent

Figure 2

Windows XP account security three strokes (2)

If you want to go further To experience this double encryption function, you can click the "Update" button in Figure 2 to open the "Startup Password" window (Figure 3). There are two options for "Startup Password" and "System Generated Password". To select "Startup Password", you need to set a password yourself, so you must enter this password before you can log in to Windows XP before you can select the account you are logged in. There are two options in the "System Generated Password" option. If you save the startup password item, the program only completes the encryption process in the background. You do not need to enter any password when logging in, because the password is saved inside the computer. If you keep the security requirements high, you can choose "on the floppy disk." Save the startup password option, so after clicking the "OK" button, you will be prompted to put a floppy disk in the floppy drive. After the creation is completed, a StartKey.Key file will be generated on the floppy disk. After each boot, the floppy disk must be placed in order to log in. The system has a key disk that can be carried with you.

Figure 3

Figure 4

Special Tip:
If you choose to save the startup password on the floppy disk, then It is recommended that you re-create a spare disk, and also need to verify the files on the floppy disk when switching from this encryption mode to other modes.

Forget the password is not afraid


Everything is relative, set a complicated password for the account, in case the password is forgotten, and can not stop others But it is terrible to keep yourself out of the "door." In fact, as long as we build a password reset disk for our own account, we can do everything.

Enter the control panel, double-click the "User Account" item, click the account name of the password reset disk you want to create in the window that opens, enter the interface as shown in Figure 4, click on the left side of the relevant Under Tasks, "Block a Forgotten Password", this will "forgot the password wizard" welcome window, click "Next" directly to prompt us to insert a blank formatted floppy disk in the floppy drive, continue to click "Next" The wizard will ask us to enter the password of the current account (as shown in Figure 5) and click "Next" to start creating the password reset disk.

Figure 5

If the password is entered incorrectly during login, the system will automatically prompt whether to reset the password. If confirmed, you need to insert it at the prompt of the wizard. Floppy disk and set a new password. How to

, introduced by the above three tips, your account should the insurance now, or whether it is to prevent someone else worry about forgotten passwords can be complicated everything is worry-free.