Password security is a fundamental security principle that we all become a little too flippant with from time to time. Only today, a friend asked me how to create a password policy that would ensure that all staff complied with, used and maintained. The biggest issue was to think of how to create the actual passwords and pass phrases.
I know from my own personal experience that when it comes to the crunch all the good password and pass phrase ideas just seem to evaporate. When I asked what OS the users were primarily using my friend replied Windows XP Pro at work and some used Windows XP Home on the road and at home.
I asked had they thought of using the Windows XP automatic password generation and assignment feature. When informed that they did not even know that on existed I explained how it worked. While showing them how this feature of Windows XP worked it occurred to me, that it would be highly likely that a whole bunch of other people would be interested and so I am writing this tip.
Point to note here is that the passwords that Windows XP (all flavors) generates are strong and secure. They may not however be as easy to remember as the normal loose and often personally related passwords that users tend to pick. No family names, birth dates etc.
This process is compatible with Windows domains, stand-alone machines and peer-to-peer workgroup scenarios. They are not necessarily easy to remember so it is a good idea to pay very careful attention during the process. I will also show you how to create a password reset disk just to be on the safe side.
Open a command prompt and key in the following:
net user username /random (where username is your login account name)
Once done press [ENTER]
Windows XP will now automatically generate and apply a strong, secure and randomly selected password to the nominated account. Windows XP will also display the password so you can take careful note in order to remember it.
At this point, you may wish to create a password reset disk in the event that you forget your password. I advise using the Prevent A Forgotten Password Wizard to do this. To activate the wizard do the following:
- Open Control Panel
- Double-click the User Accounts tool
- Click your account icon (the one you just used to create the automatically generated and assigned password)
- Under Related Tasks, select Prevent A Forgotten Password
- Now follow the wizard's instructions
Do not forget to store this disc in a location where it is both handy and free from tampering or unauthorized access.
I recommend that you teach your users this procedure and make them responsible for the generation, storage and maintenance of their individual recovery Prevent A Forgotten Password disks as well. After all, it is their account.
Until next time, enjoy!
