MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Lesson 4: Configuring Security Options
Lesson 4 Configuring Security Options
16-31
In the Local Security Settings window, under the Local Policies folder, there is a Security
Options folder. There are close to 60 additional security options grouped into the
following categories: accounts, audit, devices, domain controller, domain member,
interactive logon, Microsoft network client, network access, network security, recovery
console, shutdown, system cryptography, and system objects. In this lesson, you learn
about some of the more important security options available.
After this lesson, you will be able to
■ Configure security options.
Estimated lesson time: 15 minutes
How to Configure Security Options
To configure security options, use the Local Security Settings window to locate and
select the Security Options node. In the details pane, double-click the option you want
to configure and use the dialog box for the option to change settings.
Table 16-5 lists important security options you should be aware of.
Table 16-5 Important Security Options in Windows XP Professional
Security Option Description
Accounts: Administrator
Account Status
Accounts: Guest
Account Status
Accounts: Limit Local
Use Of Blank Passwords
To Console Logon
Only
Accounts: Rename
Administrator Account
Accounts: Rename
Guest Account
Enables or disables the Administrator account under normal
operation. Under safe mode boot, the Administrator account is
always enabled, regardless of this setting.
Enables or disables the Guest account.
Determines whether remote interactive logons by network services
(such as Remote Desktop, Telnet, and File Transfer Protocol)
are allowed for local accounts that have blank passwords. If
this setting is enabled, a local account must have a nonblank
password to be used to perform an interactive or network logon
from a remote client.
Specifies a different account name to be associated with the
Administrator account. You should use a name that does not
identify it as the Administrator account to make it difficult for
unauthorized users to break into the account.
Specifies a different account name to be associated with the
Guest account.