How the computer improves the security of the account password after Windows XP system stops service

I believe we all know how to set an account password for the WinXP system, but the level of the password is absolutely normal grade. Now the small series has a method, do not need Third-party software, just click a few mouse and enter a few values to improve the security of the password. We usually define a more secure password rule using the "Local Security settings" tool of the XP system, and you can activate it by typing "secpol.msc" in "Start → run". The left directory tree in the main window expands "account policy → password policy" in turn, and the password rule we want to define is the option displayed on the right panel!

First, set password complexity

1, first double-click the password must meet complexity requirements, set the security setting to Enabled;

2, at this time the user in the "control Panel → user account" to create the password must include uppercase and lowercase English, Arabic numerals and special characters, three types of characters, if not included in one of the characters, will pop-up dialog box prompts.

Password length minimum value:

The minimum number of digits that a user creates a password, you can enter an Arabic numeral between 0 and 14, and 0 does not require detection of the password length created. Once the user creates a password that does not meet the required number of digits, the system will also eject the dialog box warning.

Maximum Password lifetime:

This is an interesting option to set the expiration time of a password, that is, a new password that meets the requirements must be replaced within the specified cycle time. Of course, setting to 0 means that the password will never expire, and the maximum cycle time is 999 days.

Minimum password lifetime:

In contrast to the maximum password lifetime option, the minimum time that a password will survive is set, during which time the user is not allowed to change the password. Similarly, set to 0 can change the password at any time, the maximum time the password can survive is 998 days.

Enforce password history:

Frequent change of password, must produce a number of different passwords, and at this time the system will help you "memory" you have used the password, help you remember the number of passwords by you to "tell" the system. 0 means that you do not have to keep the password history, the system can only help you remember the history of the 24 password, the original system memory is also limited.

Store passwords for all users in the domain using reversible encryption: It is recommended that you disable this feature to ensure password security.

Clear the specific meaning and scope of the options, we can flexibly customize the password rules, the author here provides a reference scheme: Password complexity requires enable, password length minimum set to 8 characters, mandatory password history set to 0, then determine the password longest (short) lifetime, Generally, the maximum lifetime is set to 2 to 3 times times the shortest lifetime, such as the maximum lifetime is set to 30 days, so the shortest lifetime can be set to 10 days, which is more reasonable.

Second, rename the system administrator account

WinXP the default system administrator account name is "Administrator" (that is, the so-called Real system Administrator account), many system experts recommend that users have this account set up the password, because the account is hidden in the normal system state, and in Safe mode, the account resolutely appear in the login screen , without setting a password, of course, you can "break into" the system without a password.

1, in the "Local Security settings", we can rename the system administrator account name, in the left directory tree to expand the "local policy → security options";

2, double click on the right board of "account: Rename system Administrator Account", in the pop-up window can enter a new system administrator account.

However, after several tests, the new system administrator account name cannot be the name of the administrator account currently logged on, or the "failed to save local policy database" error dialog box is ejected.

In fact, as early as the installation of the WinXP system, the creation of the account nickname is not allowed for the administrator and the name of the guest, if you and the author, like to use the "Administrator" account nickname, at this time do not have to enter any characters in the account nickname, direct cooling system, reboot, WinXP has skipped the account nickname step and logged into the system directly with the administrator account.