"users & passwords" allows you to create user with no passwords?

"users & passwords" allows you to create user with no passwords?

Post by aG90YWlyZ3 » Fri, 16 Dec 2005 09:24:40


In a workgroup env, you can set the local policy of a XP pro or windows 2000
machine to require 8 character complex passwords. If you go to control
panel/users & passwords, it will allow you to create a user with no password
at all. What am I missing here? I can remove the applet so no one can do this
but I can't imagine this is a default behaviour. What I am missing?
 
 
 

"users & passwords" allows you to create user with no passwords?

Post by Doug Knox » Fri, 16 Dec 2005 10:39:03

The user may not be allowed to log on, or they may be prompted to change their password when they first attempt to logon. The Users applet doesn't even offer a chance to set a password, that's done as a later "change".

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.yqcomputer.com/
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.yqcomputer.com/
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

 
 
 

"users & passwords" allows you to create user with no passwords?

Post by Steven L U » Thu, 22 Dec 2005 07:15:13

As Doug said they will be forced to change their password at logon and then
they will have to select a password that complies with password policy. By
default in XP Pro you can not use a blank password to access a computer
share so that risk does not exist when the user account is created with no
password. -- Steve