MCDST : Supporting Users and Troubleshooting a Microsoft Windows XP Operating System Chapter 6: Configure and Troubleshoot Local User and Group Accounts

Guide to MCDST Objectives Understand user accounts on Windows XP Understand the default user accounts Create and manage local user accounts Work with the Local Users and Groups tool

Guide to MCDST Objectives (continued) Use groups Troubleshoot issues with user accounts Understand user rights

Guide to MCDST Windows XP Professional User Accounts Local user account –Exists on a single computer –Cannot be used to gain domain access of any kind Local groups –Exist only on the computer on which they were created

Guide to MCDST Windows XP Professional User Accounts (continued) Windows XP Professional local user account stores details about –Security –Preferences Domain user account –Exists in a domain or in any trusting domain by virtue of being created on a domain controller

Guide to MCDST How Accounts Interact with a Windows XP Professional System Standalone system, automatic logon Standalone system Workgroup member Domain network client

Guide to MCDST Default User Accounts of Windows XP Administrator account –Most powerful user account within Windows XP –Characteristics Cannot be deleted Cannot be locked out Can be disabled Can have a blank password

Guide to MCDST Default User Accounts of Windows XP (continued)

Guide to MCDST Default User Accounts of Windows XP (continued) Guest Account –One of the least privileged user accounts in Windows XP –Characteristics Cannot be deleted Can be locked out Can be disabled Can have a blank password

Guide to MCDST Default User Accounts of Windows XP (continued)

Guide to MCDST Managing Local User Accounts To create a local representation of an existing domain/network user account –Use the Add button on the User Accounts applet Local Users and Groups utility –Accessed through the Advanced button on the Advanced tab of the User Accounts applet

Guide to MCDST Local Users and Groups Tool Used to create and manage local users Accessed by pressing the Advanced button on the Advanced tab of the User Accounts applet

Guide to MCDST Local Users and Groups Tool (continued)

Guide to MCDST Users Node Displays all existing local user accounts HelpAssistant and Support accounts –Used to enable Remote Assistance and online Help and Support Services, respectively Details pane lists: –Name of the user account –Full name of the user –Description of the account

Guide to MCDST Users Node (continued)

Guide to MCDST Users Node (continued)

Guide to MCDST Users Node (continued)

Guide to MCDST Supporting More Than One User Multiple-user systems –Operating systems that can support more than one user –Implemented in Windows XP through Groups Resources Policies Profiles

Guide to MCDST Groups Node Groups –Members share the privileges or restrictions of the group –Used to give a specific level of access to multiple users –Local user can be a member of multiple groups

Guide to MCDST Planning Groups and System Groups Existing groupings that can be transformed into Windows XP groups –Organizational functioning units, workgroups, or departments –Authorized users of network programs and applications –Events, projects, or special assignments –Authorized users of network resources

Guide to MCDST Working with Default Groups Default groups –Administrators –Backup Operators –Guests –Network Configuration Operators –Power Users –Remote Desktop Users

Guide to MCDST Troubleshooting User Accounts Most common problem associated with user accounts –Password issues Other common user account problems –Misconfiguration of user account details or group membership

Guide to MCDST User Rights Assignment User Rights Assignment section of a policy object –Defines which groups or users can perform the specific privileged action Items in this policy –Access this computer from the network –Act as part of the operating system –Add workstations to domain –Adjust memory quotas for a process

Guide to MCDST User Rights Assignment (continued)

Guide to MCDST Summary Windows XP –Multiple-user operating system that supports both local and domain-based user accounts –Has two default user accounts: Administrator and Guest Local User Accounts created and managed through two interfaces: –User Accounts Control Panel applet –Local Users and Groups tool from Computer Management

Guide to MCDST Summary (continued) Proper use of groups –Will aid in simplifying complex administrative tasks Troubleshooting user accounts –Resetting passwords when users forget them User rights –System-level privileges that are managed through local or domain policies