SECURITY BASICS

Copyright © 2004 by Course Technology. All rights reserved.This publication is protected by federal copyright law. No part of this publication
may be reproduced without prior permission in writing from Course Technology. Some of the product names and company names have been
used for identification purposes only and may be trademarks or registered trademarks of their respective manufactures and sellers.
32 Chapter 3 Security Basics
LAB 3.3 PREVENTING THE DISPLAY OF THE LAST LOGON NAME
Objectives
One way to discourage a password hacker is to remove the name of the last user to log on
from the Log On to Windows entry window. This is especially useful on remote-access
computers.Without an account name, the hacker will have an extra step to complete before
gaining access to the system. Otherwise, the hacker will know at least one account on the
system and will only have to crack the password. If someone has physical access to a
computer, cracking passwords can be relatively easy.
After completing this lab, you will be able to:
Modify the Windows Server 2003 local security policy
Change the “Do not display last user name” security option
Materials Required
This lab requires the following:
A Windows Server 2003 server configured as a stand-alone server
Administrator access to the server
Two user-level accounts: User1 and User2
Estimated completion time: 15 minutes
ACTIVITY
1. Log on to the Windows Server 2003 server as Administrator.
2. Click Start, click All Programs, click Administrative Tools, and then click
Local Security Policy.
3. Expand Local Policies.
4. Click Security Options. A screen resembling Figure 3-4 appears.
5. Double-click Interactive logon: Do not display last user name.
6. Click the Enabled option, as shown in Figure 3-5.
7. Click OK.
8. Close all windows and log off.
9. Press Ctrl+Alt+Delete. Notice that the User name field is empty in the
logon screen.