Question

You work as the IT security administrator for a small corporate network. You are improving office computers' security by renaming and disabling default computer accounts. In this lab, your task is to perform the following on the Office1 computer: Rename the Administrator account as Yoda. Disable the Guest account. Verify that Password never expires is not selected for any local users. This forces them to change their passwords regularly. Delete any user accounts with User must change password at next logon selected. This indicates that a user has never logged in. What are the tasks you need to perform on the Office1 computer to improve its security?

1) Rename the Administrator account as Yoda
2) Disable the Guest account
3) Verify that Password never expires is not selected for any local users
4) Delete any user accounts with User must change password at next logon selected

Answer 1

To secure the Office1 computer, rename the Administrator account, disable the Guest account, ensure users' passwords must be changed regularly, and delete inactive user accounts that have not completed their first login.

Step-by-step explanation:

To improve the security of the Office1 computer, you need to complete several administrative tasks. These steps are critical in ensuring only authorized users have access to the system and to enforce regular password updates for security reasons.

Steps for Securing the Office1 Computer

1. Rename the Administrator account to 'Yoda'. This is done to make it less obvious to potential attackers what the name of a high privilege account is.
2. Disable the Guest account. This account is often a target for unauthorized access as it is usually less secured.
3. Check that Password never expires is not enabled for any accounts. This ensures that users must update their passwords periodically, making it harder for old passwords to be used by attackers.
4. Finally, delete any user accounts that have 'User must change password at next logon' selected but have never logged in. This helps to prevent the exploitation of these inactive accounts.