水的logo:XP密码策略

SYSKEY 指的就是系统密码。
取消登陆密码可以这样做：
点击 开始－设置－控制面板，再一次双击管理工具－本地安全策略，打开本种安全设置窗口，接着依次打开左边的 本地策略－安全选项，然后在右边找到并双击 登陆屏幕上不要显示上次登陆的用户名 ，在弹出的本地安全策略这种窗口中选中 已启用 ，确定退出。
这样就可以了。

1.autologin

rundll32 netplwiz.dll,UsersRunDll

2.syskey

How to use the SysKey utility to secure the Windows Security Accounts Manager database
View products that this article applies to.
Article ID : 310105
Last Review : July 12, 2004
Revision : 3.0
This article was previously published under Q310105
For a Microsoft Windows NT version of this article, see 143475 (http://support.microsoft.com/kb/143475/).
On This Page
SUMMARY
MORE INFORMATION
Configure Windows System Key Protection
APPLIES TO

SUMMARY
The Microsoft Windows 2000, Microsoft Windows XP, and Microsoft Windows 2003 Security Accounts Management Database (SAM) stores hashed copies of user passwords. This database is encrypted with a locally stored system key. To keep the SAM database secure, Windows requires that the password hashes are encrypted. Windows prevents the use of stored, unencrypted password hashes.

You can use the SysKey utility to additionally secure the SAM database by moving the SAM database encryption key off the Windows-based computer. The SysKey utility can also be used to configure a start-up password that must be entered to decrypt the system key so that Windows can access the SAM database. This article describes how to use the SysKey utility to secure the Windows SAM database.
Back to the top

MORE INFORMATION
Configure Windows System Key Protection
To Configure Windows System Key Protection, follow these steps: 1. At a command prompt, type syskey, and then press ENTER.
2. In the Securing the Windows Account Database dialog box, note that the Encryption Enabled option is selected and is the only option available. When this option is selected, Windows will always encrypt the SAM database.
3. Click Update.
4. Click Password Startup if you want to require a password to start Windows. Use a complex password that contains a combination of upper case and lower case letters, numbers, and symbols. The startup password must be at least 12 characters long and can be up to 128 characters long.

Note If you must remotely restart a computer that requires a password (if you use the Password Startup option), a person must be at the local console during the restart. Use this option only if a trusted security administrator will be available to type the Startup password.
5. Click System Generated Password if you do not want to require a startup password.

Select either of the following options:• Click Store Startup Key on Floppy Disk to store the system startup password on a floppy disk. This requires that someone insert the floppy disk to start the operating system.
• Click Store Startup Key Locally to store the encryption key on the hard disk of the local computer. This is the default option.
Click OK two times to complete the procedure.

Remove the SAM encryption key from the local hard disk by using the Store Startup Key on Floppy Disk option for optimum security. This provides the highest level of protection for the SAM database.

Always create a back-up floppy disk if you use the Store Startup Key on Floppy Disk option. You can restart the system remotely if someone is available to insert the floppy disk into the computer when it restarts.
Note The Microsoft Windows NT 4.0 SAM database was not encrypted by default. You can encrypt the Windows NT 4.0 SAM database by using the SysKey utility.
Back to the top

--------------------------------------------------------------------------------

APPLIES TO
• Microsoft Windows Server 2003, Standard Edition
• Microsoft Windows Server 2003, Enterprise Edition
• Microsoft Windows Server 2003, Web Edition
• Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
• Microsoft Windows Server 2003, Datacenter Edition
• Microsoft Windows XP Home Edition
• Microsoft Windows XP Professional
• Microsoft Windows XP Tablet PC Edition
• Microsoft Windows XP Professional 64-Bit Edition (Itanium)
• Microsoft Windows XP Professional 64-Bit Edition (Itanium)
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Professional Edition
• Microsoft Windows 2000 Advanced Server

Back to the top