"users & passwords" allows you to create user with no passwords?

G

Guest

In a workgroup env, you can set the local policy of a XP pro or windows 2000
machine to require 8 character complex passwords. If you go to control
panel/users & passwords, it will allow you to create a user with no password
at all. What am I missing here? I can remove the applet so no one can do this
but I can't imagine this is a default behaviour. What I am missing?
 
D

Doug Knox MS-MVP

The user may not be allowed to log on, or they may be prompted to change their password when they first attempt to logon. The Users applet doesn't even offer a chance to set a password, that's done as a later "change".
 
S

Steven L Umbach

As Doug said they will be forced to change their password at logon and then
they will have to select a password that complies with password policy. By
default in XP Pro you can not use a blank password to access a computer
share so that risk does not exist when the user account is created with no
password. -- Steve
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Security Settings for Password Policy and User properties 6
Password Policy not working properly 2
Password: Admin and User - Unable to log in 3
Cannot Set Password Policy 3
Password must meet complexity requirements 4
Gaining Administrator Access to Windows XP Professional SP2 System 14
Preventing an account from having a blank password. 4
Group policy restrictions remain after leaving domain 1

Top