1. What are other available password policy options that could be enforced to improve security? Enforce password history, Maximum password age, Minimum password age, Minimum password length, Store passwords using reversible encryption, and Passwords should always meet complexity requirements

2. Is using the option to “Store passwords using reversible encryption” a good security practice? Why or why not?
The Store password using reversible encryption policy setting provides support for applications that use protocols that require the user's password for authentication. Storing encrypted passwords in a way that is reversible means that the encrypted passwords can be decrypted. A knowledgeable attacker who is able to break this encryption can then log on to network resources by using the compromised account. For this reason, never enable Store password using reversible encryption for all users in the domain unless application requirements outweigh the need to protect password information.

3. When should you enable the option to “Store passwords using reversible encryption”?
If you use the Challenge Handshake Authentication Protocol (CHAP) through remote access or Internet Authentication Services (IAS), you must enable this policy setting. CHAP is an authentication protocol that is used by remote access and network connections. Digest Authentication in Internet Information Services (IIS) also requires that you enable this policy setting.

4. Why should you use the different password policy options available (with the exception of storing the password using reversible encryption)?
Using different password policy options insures that the passwords created will be more “Secure” from hackers.

5. Could you perform the analysis on other computers? If so, how do you connect from the main computer?
You can also use MBSA to scan a group of computers based on