Use the syskey command to enhance Windows/XP system security

In Windows XP and Windows 2000, a powerful command is the syskey command.

This command can effectively enhance your system security. Maybe you have to enter your account and password when entering Windows XP or Windows 2000. Isn't this safe? You should have heard of the famous WIN 2000 Input Method Vulnerability. If your computer is used by many people, others can access the system by breaking the simple password of others, attackers can exploit various vulnerabilities to obtain administrator privileges. With the encrypted floppy disk created by syskey, you can use 2000 and XP with full confidence. Next let's take a look at the usage of the syskey command.
　　
I. Dual password protection settings
1. Enter "syskey" in "run" in the Start menu and click "OK.
　　
2. The account database mentioned in this interface is the principle of NTFS encryption. For general users, we do not need to study the principle. We only need to use it. Click "Update" next ".
　　
3. Here we select password to start, enter a password, and then click OK. In this way, WINXP requires one more password at startup, which plays a role of two encryption times. When the operating system is started, a window will prompt "this computer requires a password to start before we enter the user name and password. Please enter the start password ". This is the first password protection we have just created.
　　
Ii. Create a password floppy disk
1. if we select "Save Startup Password on a floppy disk", a password floppy disk will be generated. No one wants to access your operating system. of course, if you have set the syskey System Startup Password, you will need to enter the password again to obtain the corresponding authorization, which is a bit similar to when we change the QQ password, the original password must be the same.
　　
2. Then, the system will prompt you to add a floppy disk to the drive. A prompt will appear after the password is generated.
　　
3. Then we start the system again. Then, the system will prompt you to insert a password to the floppy disk. If you do not insert a floppy disk, click OK. The system will not allow you.
　　
Insert a password floppy disk and enter different passwords based on different accounts. At the same time, if you want to, the key file in the password floppy disk can be copied to another floppy disk.
　　
Iii. High Security Requirements for password floppy disk Removal
If one day you have less demanding security requirements on the operating system, and you are tired of inserting a floppy disk every time you enter the system, what should you do? Select "Save the start password on the local machine". Of course, you must have a floppy disk with a key, this is in line with the need to enter the authorization password when creating a password floppy disk.

Source: CCID technical community