Friday, April 2, 2010

Windows Ethical Hacking

Protecting User Privacy at Logon Prompts:

   Normally, at the time of logging into a windows system, it is possible to find out inforation on the last user since his/her details are stored in the cache memory. It is always a good security and privacy to prevent this information from being displayed by executing the following registry tweak

1. Run -> regedit
2. a. HKEY_LOCAL_MACHINE\SOFTWARE\MICROSFT\Windows\CurrentVersion\Policies\System
        (For windows 2000 or XP).
    b. HKEY_LOCAL_MACHINE\Network\Logon (For windows 95,98 or ME).
    c. HKEY_LOCAL_MACHINE\SOFTWARE\MICROSFT\WindowsNT\CurrentVersion\Winlogon
3. Create a new DWORD value (within the above registry key) called DontDisplayLastUserName and set its
    value to '1' to prevent the last username from displaying and to '0' to implement the default settings
4. Exit the windows registry and restart the windows session for the change to be applied.

Improving Password Security Setting:

    The biggest security loophole plaguing system across the world in the tendency of user to choose a poor password. Hence a number of system administrator prefer to force user to use a strong password through a small but effective registry tweak. 

1. Open the regedit.exe file
2. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network
    (For Specific Users Only)
                                                 OR
   HKEY_CURRENT_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Network
   (For the Entire Machine)
3. Create a new DWORD value (within the above registry key ) called AlphanumPeds and set its value to '1',
    to allow only alphanumeric password and to '0' to disable this feature. By default, windows accepts any 
    kind of password. However, once this option has been enabled, the windows shall accept only 
    alphanumeric password.
4. Exit the windows registry and restart the windows session for the change to be applied.

 Note: We will update day by day  in PC tips
Hint: Use the above details carefully.

No comments:

Post a Comment