System Account Security Settings

1. Do Not Display logon usernames: Control Panel-management tools-local security policies-Local Policies-Security Options, on the right side, select "login screen does not display the user name of the last login" to enabled;

2. Disable the GUEST account and disable or delete unnecessary accounts;

3. Change the Administrator account name (right-click "my computer" and choose "manage"> "Local User" and "group"> "user" in the right book window, right-click "Administrator", and choose "RENAME ");

4. Set an account lock Policy (Control Panel-Administrative Tools-local security policies-Account Policies-account lock policies)

5. Do not allow anonymous enumeration of SAM accounts in XP: Open "Group Policy", computer configuration-Windows Settings-Security Settings-Local Policies-security options; double-click "network access: do not allow anonymous enumeration of SAM accounts. Make sure that "enabled" is selected, and enable "Network Access: Do not allow anonymous enumeration of SAM accounts and shares ";

6. Enable Password Policy: Go to "Control Panel-Local Security Policy", open the password policy, and set this item as follows:

Complex password line requirements: enabled;

Minimum Password Length: 7 characters;

Force password history: 5 digits;

Maximum Retention Period: 42 days;

7. Set User Permissions: when multiple users share a single computer, you can set user permissions in Windows XP using organization policies. Open "Group Policy" and expand "Computer Configuration-Windows Settings-Security Settings-local policy-user rights assignment" branch. Double-click the user permission that needs to be changed. Click "add" and double-click the user account you want to assign permissions.