Windows Account Policy Concepts

This lab is about ideas, not about a particular machine. You are shown the account settings of a fictional office fleet of Windows workstations as a settings form, and asked to choose values that reflect good practice. No Windows host is involved: the form stands in for the policy console, and the checker reads your choices.

The current settings are convenient and risky: a shared local administrator password on every machine, staff working every day as administrators, a guest account left on, a screen that never locks and no record of who signed in. Change each choice with a reason. Think about how a single stolen password could spread across a fleet, and how daily use of a powerful account turns an ordinary mistake into a disaster.

Keep a sealed emergency administrator account, because a fleet with no way back in is a different kind of failure. All required checks must pass for the flag. The lab only reads the text you submit; nothing is applied to a real system, and the check tells you what is still weak and why, never the exact line to type.