The Account Policies in Windows XP consist of two different components. There is a Password Policy and an Account Lockout Policy. Both can be used to increase security on a Windows XP computer.

You can access the Password Policy settings through the Local Security Policy. The settings include:

• Enforce password history

• Maximum password age
• Minimum password age
• Minimum password length
• Password must meet complexity requirements
• Store password using reversible encryption for all users in the domain

It is always recommended that users be forced to change their password to increase security. You can force users to change their password at a specific interval, such as every 30 days. You can configure this behavior by editing the Local Security Policy as outlined below.

1. Click Start and select Control Panel.

2. Double click Administrative Tools.
3. Double click Local Security Policy.
4. Expand Account Policies and select Password Policy.
5. In the details pane, double click Maximum password age.
6. Use the arrow and set the value to 30 days.
7. Click OK.

You can also ensure that users keep the same password for a minimum number of days by changing the Minimum password age. Complete steps 1 through 4 and double click Minimum password age in the details pane.

Security can also be increased by forcing users to choose more complex passwords. For example, you can require users to choose passwords that are a certain length. To enforce this, open the Minimum password length policy setting and use the arrows to select the appropriate value. Finally, you can also enable the Password must meet complexity requirements policy setting.

[tags]xp,certification,70-270,account policies,local security policy[/tags]