winxp local machine logon 1

[zacca]

Hi there,

Assume all winxp are in workgroup mode only, no AD.

How can I force all winxp machines
1. must have logon prompt before go into windows desktop
2. must use password for that local windows logon
(no need to have those strong password policy)

Many thanks!

 

[SimonDavies]

You would need to create the local accounts, assign passwords for those accounts and then disable the guest account.

You would have to use gpedit.msc from the run command to open up the local computer policy, then go to the Comp Conf., Windows Settings, Local Policies, Security Options.
You should disable Guest account.
I would also look at disabling Fast User Switching service but that's only something that I do (but it does bring back the logon box as well).

 

[zacca]

hi simon,

thx for your comments, after i run gpedit to change the settings, how can i export them & import to other computers? u know i don't want to do those settings one by one on every computer!

many thx!

 

[SimonDavies]

TBH you could just disable the Guest account without running the gpedit.msc. Just right click on the My Computer, choose manage and in the Local Users and Groups container do all the work you need (ie disable and create the user accounts).

As for the FUS go down to the Services and Applications on the same Computer Management MMC and find the Fast User Switching service and disable that.

After that you should be ok, you may want to enforce some kind of password restrictions and for that you would need to use the Local Computer Policies.

To create a security policy for use on other machines I would do a search using the Help and Support function on XP and search for local security policy and have a look at what it brings up.

Hope this helps.