Small Business Technology Blog

Tuesday, October 6, 2009

Windows XP – Secure your Computer from Internet Attacks

We're all a little anxious about people hacking into our computers and gaining access to our confidential data Right?

Well once you've put in place all of the standard Anti-virus, anti-spyware, anti-malware, anti-phishing, anti-trojan and anti-root kit tools there's one more controversial tweak that tightens up the security just that little bit more!

To avoid unauthorized access, you may have set a password on your windows XP user account that you can remember easily. Even with a password set, hackers on the internet can break into your account and get access to your files. So, what do you have to do now? You better set a blank password or use no password at all right? Wait... What?

Yes! Using a blank password (or no password at all) can make your computer more secure. Huh?

Accounts on Windows XP that are not secured by a password, cannot be accessed remotely over the network or the Internet, good for stand alone PC's, but don't try this in a small office or a home with more than one computer that you intend to share files or printers too. (see note below)

The official guide from Microsoft on Password Practices suggests using blank passwords on Windows XP machines ONLY when the following criteria are met:
  • You only have one computer or you have several computers but you do not need to access information on one computer from another one.
  • The computer is physically secure (you trust everyone who has physical access to the computer – like your family members)

However, using blank password (or no password at all) is not always a good idea particularly when a computer is not in a secure location. For instance, your laptop is not physically secure so, setting up a strong password is a good deterent to most would be theives (although with the right tools a windows XP password can be disabled in less than 60 seconds)

So what if the environment is secure (you trust everyone in your office) and you want to add this additional level of security (blank the password) BUT you need access to files and printers on that computer from other computers?

There is a work around... Running the command gpedit.msc in the Run box (click start, Run) and disabling the setting “Limit local account use of blank passwords to console login only” available under Local Policies will allow you to access Windows XP Professional computers over the network after the password is blanked out or removed.

To remove the password, go into Control Panel, users and Select the user, then click remove password.

If you're not sure you're already doing everything you can to keep your computers safe on the internet or in the office, pickup the phone and call The Technology Coach.

Because... For a Proactive Approach, You should call The Technology Coach!

No comments:

Post a Comment