Windows XP Account Security

It is not easy to protect your account. Some Careless users set the account password too short, do not change the password for a long time, and so on are important killers that affect account security, but now we are technically limiting the usage of group policies as a magic tool for these careless users.

Open the run dialog box in the Start menu and enter "Gpedit. msc open the Group Policy Editor, go to "Local Computer Policy"> "Computer Configuration"> "Windows Settings"> "Security Settings"> "Account Policy"> "Password Policy ", you will find six password settings on the right. Double-click the "Password Must Meet Complexity Requirements" item and set it to "enabled ", after this option is enabled, the user's password cannot be simple 111, 123, or abc. Next, double-click "Minimum Password Length" and set the value to 6 or more. In this case, the minimum password length must be 6 characters; another important setting is "Minimum Password retention period". For example, if we set it to 15 days, the system will automatically remind us to change the password when it reaches 15 days, this helps the password security (figure 1 ). Figure 1

Double encryption for accounts

I believe many of my friends have set complex passwords for their own accounts, but they are still worried about password cracking. In fact, you can set double encryption for your account.

Click "start" and open the "run" dialog box in the displayed menu. Enter "syskey" and press enter to open the "secure Windows XP Account Database" window. This operation is irreversible, once encryption is enabled, it cannot be disabled. (2) If you select "enable encryption" and click "OK" here, the program has completed double encryption for the account, however, this encryption process is transparent to users.

If you want to further experience this double encryption feature, you can click "Update" in Figure 2 to open the "Start password" window (Figure 3 ), there are two options here: "Start password" and "system generated password". If you select "Start password", you need to set your own password, in this way, you must enter the password before you can select the Logon account. The "password generated by the system" option has two more options, if you select the "Save start password on local computer" option, the program completes the encryption process only in the background. No Password is required during logon, because the password is saved inside the computer, if you have high security requirements, you can select the "Save Startup Password on a floppy disk" option. After you click "OK", you will be prompted to add a floppy disk to the floppy disk. After creation, a StartKey. Key file will be generated on the floppy disk. After each boot, the file must be placed on the floppy disk to log on. This is equivalent to a portable Key disk in the system.

Note: If you choose to save the start password on a floppy disk, we recommend that you create another backup disk. In addition, when you switch from this encryption mode to another mode, you also need to verify the files on the floppy disk.

　Not afraid to forget the password.

Everything is relative, and a complicated password is set for the account. If the password is forgotten one day, it will be miserable if someone else can block himself out of the door. In fact, as long as we create a password reset disk for our account creation in advance, we will have no worries.

Go to the control panel, double-click "User Account", and click the account name for which you want to create a password reset disk in the displayed window to go to the interface shown in 4, click "block a forgotten password" under "related tasks" on the left, and the "forgot password wizard" Welcome window will pop up, directly click "Next" to prompt us to insert a blank formatted floppy disk in the drive. Continuing to click "Next", the wizard will ask us to enter the password of the current account (5) enter the password and click "Next" to create a new disk.

In the future, if a wrong password is entered during login, the system will automatically prompt whether to reset the password. If you are sure, You need to insert a floppy disk and set a new password at the prompt of the wizard.

With the three tips described above, you should be able to protect your account, whether it is to prevent others or worry that you have forgotten the complex password.