Little-known system commands: syskey

Here we will introduce a little-known command in WINXP and win2000: syskey

This command can effectively enhance your system security. Maybe you have to enter your account and password when entering XP or 2000. Isn't this safe? You should have heard of the famous Win2000 Input Method Vulnerability. If your computer is used by many people, others can access the system by breaking the simple password of others, attackers can exploit various vulnerabilities to obtain administrator privileges. With the encrypted floppy disk created by syskey, you can use 2000 and XP with full confidence. Let's take a look at the usage of this command.

I. Dual password protection settings:

1. Enter "syskey" in "run" in the Start menu and click "OK. You will see the interface 1.

2. The account database mentioned in this interface is the principle of NTFS encryption. For general users, we do not need to study the principle. We only need to use it. Click "Update" next. The page shown in Figure 2 is displayed.

3. Here we select password to start, enter a password, and then click OK. In this way, WINXP requires one more password at startup, which plays a role of two encryption times. When the operating system is started, a window will prompt "this computer requires a password to start before we enter the user name and password. Please enter the start password ". This is the first password protection we have just created.

Ii. Create a password floppy disk:

1. If we select "Save start password on floppy disk" in the second item in Figure 2, a password floppy disk will be generated without this floppy disk, no one wants to access your operating system. of course, if you have set the syskey System Startup Password, you will need to enter the password again to obtain the corresponding authorization, which is a bit similar to when we change the QQ password, the original password must be the same. (3)

2. Then, the system will prompt you to put a floppy disk in the soft drive. After the password floppy disk is generated, the system will prompt 4.

3. Then we start the system again. Then, the system will prompt you to insert a password to the floppy disk. If you do not insert a floppy disk, click OK. The system will not allow you.

This is like when we go home, we must first open the anti-theft door of the unit (insert a password to the floppy disk ). Then you can open the house (enter different passwords based on different accounts ). The only difference is that in reality, the password of the anti-theft door is known to many people, and the operating system's password floppy disk is only available to only one person. If you want to, the key file in the password floppy disk can be copied to another floppy disk.

Iii. High Security Requirements for password floppy disk Removal

If one day you have less demanding security requirements on the operating system, and you are tired of inserting a floppy disk every time you enter the system, what should you do? Select "Save the start password on the local machine" in Figure 3. Of course, you must have a floppy disk with a key, this is in line with the need to enter the authorization password when creating a password floppy disk.

If you are interested in the key file in the generated password floppy disk, You can further study the file in the floppy disk.

the encryption method is simple and effective. Why don't you try it?