Preventing an account from having a blank password.

[Guest]

Currently on this Windows XP Pro workstation, if an account is created using
the Users& Passwords tool from the control panel, it will allow an account to
be created that has no password. The same system does not allow this account
to be created if I go through Administrative Tools. Is there a way to either
disable the Users & Passwords icon in the control panel or to force the Users
& passwords tool to require a password at the time the account is created?

 

[Robert Moir]

Currently on this Windows XP Pro workstation, if an account is
created using the Users& Passwords tool from the control panel, it
will allow an account to be created that has no password. The same
system does not allow this account to be created if I go through
Administrative Tools. Is there a way to either disable the Users &
Passwords icon in the control panel or to force the Users & passwords
tool to require a password at the time the account is created?

Not tested it but have you looked at the local policy for the computer? You
can require password complexity and length there which might help.

 

[Doug Knox MS-MVP]

Use the Group Policy Editor to block the nusrmgr.cpl applet.

 

[Doug Knox MS-MVP]

I tried this, Robert. The Users applet in control panel will still allow you to create an account with no password.

 

[Robert Moir]

I tried this, Robert. The Users applet in control panel will still
allow you to create an account with no password.

Just tried it myself and I agree with you. Looks like we found us a bug; the
password length thing might be debatable, but the password complexity thing
blocks account creation with a poor password in a domain environment, so it
feels very wrong to me that you can sneak past it here!