Magical use of local policies to manage password security

It can be said that any computer may have security risks, these security risks often cause the leakage of important data. As a user, it is obligatory and responsible to ensure the security of the computer.

When it comes to security, many people think that it is the right of the masters, only the unfathomable things that the master can complete. In fact, this is not the case. In order to improve the security of the system and meet the needs of users in securing computers, Microsoft has provided us with a local security policy configuration window. Today we will introduce the password policy in the security settings.

Tip: We can go to the control panel, open the "Administrative Tools" item, double-click the "Local Security Policy" to open the "Local Security Settings" window, and select "Account Policy" on the left side of the window. Password Policy" (Figure 1).

First, the password must meet the complexity requirements

Get the login password is one of the most basic methods of hacker attack, so we start from the security password. Since many users use simple numbers or letters to combine passwords, some do not even use passwords, which is extremely insecure. In this regard, IT Stargo.com (http://www.it8g.com
) reminds everyone that you only need to double-click the "Password must meet the complexity requirements" item, and set it to "Enabled" in the window that opens. "Yes.

Second, the minimum password length

Short passwords are easily brute-forced, so the password must be long enough, so users always forget this. In this regard, we can double-click to open the "password length minimum", and then set its value to 6, so that the set number of passwords less than 6 digits will not be able to do (Figure 2).

Third, the longest password /short retention period

In theory, no matter how complicated the password, only enough time can be violently cracked. It can be seen that it is extremely insecure for us to use a password for a long time. For this, we have to double-click to open the “Maximum password retention period” and set a time, for example 30 days, so that after 30 days, the user will be automatically reminded to change the password. .

Correspondingly, there is also a "password minimum retention period", which means how long the user must use the password before you can continue to change the password, for example, the author set it to 10 days, so only It can be modified by using the current password for 10 days. This will prevent some hackers from directly modifying the account password.

IV. Forced Password History

After setting the maximum password retention period, you will face another problem, that is, you need to reset a password after each expiration. However, some users are lazy and often use only two or three commonly used passwords for recycling, which is also unsafe for system security. In this regard, we just double-click the "force password history" item, and the password history it remembers is larger, so that users can be prohibited from reusing the same password content in a short period of time.

After this setting, the user must follow the configured policy when setting the password again, otherwise an error window will pop up, indicating that the password does not meet the password policy requirements (Figure 3), thus forcing the user to set enough Long, complex passwords provide security for the system.