Secure Logon and Windows Help Instructions

[Tom461]

Windows XP HELP indicates that Secure Logon can be turned on and off by using
the ADVANCED tab in User Accounts. But User Accounts has no such tab, nor any
tabs at all that I can locate. Either Microsoft is very clumsy on updating
Help files, or I am missing something obvious here. Someone please advise how
to turn on and off the requirement for secure logon. I am the administrator
on a home computer.

 

[Nepatsfan]

Windows XP HELP indicates that Secure Logon can be turned on and off by
using
the ADVANCED tab in User Accounts. But User Accounts has no such tab, nor
any
tabs at all that I can locate. Either Microsoft is very clumsy on updating
Help files, or I am missing something obvious here. Someone please advise
how
to turn on and off the requirement for secure logon. I am the
administrator
on a home computer.

To access the User Account applet that's cited in the help file click on
Start -> Run and enter control userpasswords2 in the Open box. Hit the OK
button. Click on the Advanced tab and you should find the option to require
users to press Ctrl + Alt + Delete at the bottom of the page.

Keep in mind that for this to work you need to disable the Welcome screen
and the computer can't be configured to log on an account automatically.

Note: If you have Windows XP installed on your computer you can use the
Group Policy Editor to require that users press CAD to logon. It's listed
under Computer Configuration/Windows Settings/Security Settings/Local
Policies. Look for Interactive logon: Do not require CTRL + ALT + DEL and
set it to Disabled.

Good luck

Nepatsfan

 

[Tom461]

Thanks. I think I am where I want to be: In starting up the computer, I must
Ctl-Alt-Del and enter my personal password, which is for intrusion protection
when I am not at home. I did not need to alter the Windows Welcome screen or
the Group Policy Editor. I notice that I have an "Administrator" account and
a "Tommy" account in the "Administrators" group column. I can't tell if that
is standard or problematic.

 

[Nepatsfan]

Answered inline.

Thanks. I think I am where I want to be: In starting up the computer, I
must
Ctl-Alt-Del and enter my personal password, which is for intrusion
protection
when I am not at home. I did not need to alter the Windows Welcome screen
or
the Group Policy Editor. I notice that I have an "Administrator" account
and
a "Tommy" account in the "Administrators" group column. I can't tell if
that
is standard or problematic.

It's not a problem. Every XP system has a built-in account named
Administrator. It's there for emergency use in case other admin level
accounts become corrupted. Bottom line, if you had a problem logging on with
the Tommy account you'd still have the Administrator account available.

By default, the Administrator account has a blank password. If you're
concerned with security you might want to password protect this account.
Also, it can be renamed through the Group Policy Editor. Be careful, while
the Administrator account cannot be deleted it can be disabled.

Nepatsfan

 

[Richard]

Windows XP HELP indicates that Secure Logon can be turned on and off by
using
the ADVANCED tab in User Accounts. But User Accounts has no such tab,
nor
any
tabs at all that I can locate. Either Microsoft is very clumsy on
updating
Help files, or I am missing something obvious here. Someone please
advise
how
to turn on and off the requirement for secure logon. I am the
administrator

Thanks. I think I am where I want to be: In starting up the computer, I
must
Ctl-Alt-Del and enter my personal password, which is for intrusion
protection
when I am not at home. I did not need to alter the Windows Welcome screen
or
the Group Policy Editor. I notice that I have an "Administrator" account
and
a "Tommy" account in the "Administrators" group column. I can't tell if
that
is standard or problematic.

Hi Tom,

You are right that the Help file is incorrect with its Secure Logon
help, by sending you to User Accounts in Control Panel, instead of the
dialog box with tabs provided by "Nepatsfan" with Start> Run>
control userpasswords2

If you are thinking about setting a password for the Administrator account,
use caution - if you forget or lose the password you may find yourself
locked out with no remedy. There is usually no need to use the Administrator
account unless your other account gets messed up. Instead of password
protecting the Administrator account, you can change your logon from Welcome
screen to the other option where it is necessary to type your user name as
well as a password, so no one would be able to enter the Administrator
account unless they knew they had to type the word "Administrator", and hit
"Enter" key without typing a password. You can change the logon method from
the regular "User Accounts" window in Control Panel by clicking "Change the
way users log on or off", and un-check "Use the Welcome Screen."

Another thing from Windows Help that you should consider:

[begin quote:]
Why you should not run your computer as an administrator
Running Windows 2000 or Windows XP as an administrator makes the system
vulnerable to Trojan horses and other security risks. The simple act of
visiting an Internet site can be extremely damaging to the system. An
unfamiliar Internet site may have Trojan horse code that can be downloaded
to the system and executed. If you are logged on with administrator
privileges, a Trojan horse could do things like reformat your hard drive,
delete all your files, create a new user account with administrative access,
and so on.

You should add yourself to the Users or Power Users group. When you log on
as a member of the Users group, you can perform routine tasks, including
running programs and visiting Internet sites, without exposing your computer
to unnecessary risk. As a member of the Power Users group, you can perform
routine tasks and you can also install programs, add printers, and use most
Control Panel items. If you need to perform administrative tasks, such as
upgrading the operating system or configuring system parameters, then log
off and log back on as an administrator.
[:end quote]

You should keep your "Tommy" account in the administrator's group, and
create a separate user account with lower access privileges, using the
Control Panel "User Accounts" window, for use in ordinary day to day
computing and internet surfing.

FWIW. --Richard