Another WinXp security question

[wagnj1]

my buddy says that if he reboots the computer and hits F8 to start windows in safe mode that he can login without knowing any account passwords. I highly doubt that...but I'm just wanting to check...what security features are involved in safe mode? how do you logon?

 

[bcastner]

The Welcome screen, in the presence of other defined users, will not show the true local Administrator. When your buddy uses Safe Mode, he is offered the true local Administrator as the logon choice: in most cases the password is blank or empty.

 

[wagnj1]

thanks for your reply - ok so his method of logging in without knowing any account passwords will only work if I was dumb and didn't set my administrator password?

 

[bcastner]

Yep.

Best wishes.

 

[wagnj1]

do you happen to know of a way to limit the number of logon attempts in XP?

 

[linney]

Account lockout threshold. Group Policy.

Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy

Logon Screen Appears to Stop Responding After Several Unsuccessful Password Attempts

http://support.microsoft.com/default.aspx?scid=kb;en-us;283198&FR=1&PA=1&SD=HSCH