Local Security Policy
The Local Security Policy console window enables a user to modify various computer rules[md]for example, user account policies and software restriction policies. If you want to whip your computer into shape, this is a great place to start.
The following screencast shows various ways of how to access the Local Security Policy and demonstrates how to make a few modifications to the policies within the utility.
The Local Security Policy can be accessed using several methods including:
- From the Run prompt. Press Windows+R, and type secpol.msc at the Run prompt.
- From the Administrative Tools section of the Start menu (not shown by default). Administrative Tools can be added to the Start menu and/or to All Programs if it is not there. This can be done by right-clicking the taskbar and selecting Properties. Then click the Start Menu tab and click the Customize button. Scroll all the way to the bottom, and under System administrative tools select one of the options to display it. Then click OK for both windows.
- By using the Group Policy Editor. Open the Local Group Policy Editor (type gpedit.msc at the Run prompt) and navigate to Computer Configuration or User Configuration, then navigate to Windows Settings > Security Settings.
- As an added snap-in to a MMC. At the Add or Remove Snap-ins window, select Group Policy Object, then on the next screen specify Local Computer (this should be the default) and click finish.
To modify any of the password policies[md]for example, password age or complexity requirements[md]navigate to Security Settings > Account Policies > Password Policy.
To modify any account lockout settings, navigate to Security Settings > Account Policies > Account Lockout Policy.