Page 630 - StudyBook.pdf

614 Chapter 11 • Operational and Organizational Security: Incident Response

While this prevents people without valid user accounts from using the
machine, it does not prevent someone from accessing a system that a valid user has
already logged into. People often need to walk away from their computers, leaving
themselves logged in with files open. Since it is not practical to shut down your
computer every time you leave your desk, the Lock Workstation feature can be
used.The Windows Security dialog box appears when CTRL+ALT+DEL is
pressed on machines running Windows OSes. By clicking on the Lock Computer
option, another dialog box requesting a username and password appears. Only the
person logged onto the computer or an account that is a member of the
Administrators group will be able to unlock the machine.A similar Lock
Workstation feature is also available for machines running Novell NetWare.
You can force users to press CTRL+ALT+DEL to login using either of two
methods in Windows XP.As seen in Figure 11.4, the “Advanced” tab of the “User
Accounts” dialog box has a checkbox titled “Require users to press
CTRL+ALT+DEL,” which when checked, forces users to logon in this manner.
Also shown in Figure 11.4 is the Local Security Settings applet that’s accessed
through Administrative Tools in the Control Panel. In “Local Security Settings” you
would expand Local Policies and then click on Security Options. In the right
pane, a listing of policies will appear. By double-clicking on Interactive logon:
Do not require CTRL+ALT+DEL, you can enable or disable the policy.

Figure 11.4 The Local Security Settings or the User Accounts Dialog Box is
Used to Force Users to Enter a Username and Password

www.syngress.com