Microsoft Windows XP Home Edition - Zenk - Security - Repository

III. User Accounts and Passwords
Microsoft Windows XP Home Edition
Security Implementation
Version 1.4b Option 1
The next step to creating a secure environment is to create a logon id and
password for all users on the system. This aspect may seem annoying for a
typical home user but should be mandatory. It will slow a hacker or thief down
for a while. This section is designed to guide you on how to manage user
accounts and enforce strong passwords.
Adding a new user account
From the Control Panel select User Accounts. You will be presented with the
Key
User
fingerprint
Account
=
window.
AF19 FA27
There
2F94
are
998D
three
FDB5
tasks
DE3D
in this
F8B5
window
06E4
that
A169
you
4E46
can
perform. 1. Change an Account. This will allow you to modify an account,
change passwords for the account, change the user group for the account, and
change the picture that is shown on the Welcome Screen. 2. Create a New
Account. This is where you create new accounts and enter all the appropriate
information that we will cover next. 3. Change the way users log on and off.
With this option you can disable the Welcome Screen and disable Fast User
Switching. Fast User Switching will allow you to log on with another account
without logging off of your account first. Windows XP Home Edition makes it
very easy to create a new account. Click the Create a New Account link to get
started. You will be presented with a window instructing you to enter the name of
the new account. This will be the user’s logon id. Once you have entered the
logon id for the user click the Next button. This will open another window. Here
you will assign the account a type of privilege. There are only two types of
access that can be granted in this window. Administration access will allow the
use full access to all files and folders on the machine. This is the default group in
Windows XP Home Edition. The other group is Limited. This access has limited
privileges. With this type of access you can change or remove your password,
change your picture, theme and other desktop settings; view files you create;
view files in the shared folder; and users may not be able to install certain
programs. There is a full description of the groups in the window. A user can
only be assigned to one group using this method. Once you have decided on a
group and have selected it you can press the Create New Account button. You
will be returned to the User Account window.
© SANS Institute 2003, Author retains full rights
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
Page 6 of 53
© SANS Institute 2003, As part of the Information Security Reading Room. Author retains full rights.