1 Chapter Overview Understanding User Accounts Planning New User Accounts Creating, Modifying, and Deleting User Accounts Setting Properties for User Accounts Implementing Groups

2 Local User Accounts

3 Domain User Accounts

4 Built-In User Accounts Administrator Use this account to manage the overall computer. For nonadministrative tasks, use a user account that is not a member of the Administrators group. You cannot delete the Administrator account. Guest Use this account to allow occasional users to log on and access resources. You can rename or disable the Guest account, but you cannot delete it.

5 Naming Conventions Create standards for identifying users Make it easier to remember logon names Simplify account administration

6 Naming Convention Guidelines Create unique logon names. Use a maximum of 20 characters. Remember that logon names are not case sensitive. Avoid invalid characters: “ / \ [ ] : ; | =, + * ? Allow for duplicate employee names. Identify the employee type. Rename the Administrator and Guest accounts.

7 Password Guidelines Assign a password to the Administrator account. Determine who assigns passwords. Use passwords that are hard to guess. Use a minimum of 8 characters (128 characters maximum). Use uppercase and lowercase letters. Use numerals and valid nonalphanumeric characters.

8 User Accounts Tool

9 Change an Account Change My/The Name Create A Password Change My/The Password Remove My/The Password Change My/The Picture Change My/The Account Type Set Up My Account To Use A.NET Passport Delete The Account

10 Manage My Network Passwords Option Use the Stored User Names And Passwords option to store all user names and passwords in a single place. In Control Panel, click User Accounts. In a workgroup environment, click your account name, and in the What Do You Want To Change About Your Account window, under Related Tasks, click Manage My Network Passwords. In a domain, in the Advanced tab, in Passwords And.NET Passports, click Manage Passwords. In the Stored User Names And Passwords window, click Add and in the Server text box, type the name of a server, domain, workgroup, or network location. In the User Name text box, type the user name you use to access the resource, and in the Password text box, type the password.

11 Prevent a Forgotten Password Option In Control Panel, click User Accounts, and then click your account name. In the What Do You Want To Change About Your Account window, under Related Tasks, click Prevent A Forgotten Password to launch the Forgotten Password Wizard. Click Next to continue. Insert a blank, formatted floppy disk into drive A, and then click Next. Type the current user’s password, and then click Next. In the Creating Password Reset Disk page, when the Progress bar gets to 100%, click Next.

12 Using a Password Reset Disk in a Workgroup 1. In the Welcome screen, click your user account icon, and then type an incorrect password. When you type an incorrect password, Windows XP Professional displays the Logon Failed dialog box, asking if you want to use your password reset disk to set a new password for your account. 2. Click Reset. This starts the Password Reset Wizard. The wizard will step you through the process.

13 Create A New User Account Only administrators can create new user accounts. There are two types of user accounts: Computer Administrator Limited

14 Change the Way Users Log On or Log Off

15 Picking an Account to Change

16 The Microsoft Management Console (MMC) Provides a standardized method for managing administrative tools Is used to administer tasks and troubleshoot problems locally and remotely Centralizes administration

17 The Computer Management Snap-In

18 Creating a Customized MMC Console

19 Creating a Local User Account with the Computer Management Snap-In

20 The General Tab Options

21 The Profile Tab Options

22 Understanding Groups

23 Local Groups A local group is a collection of user accounts on a computer. Using local groups simplifies administration on a local computer. You should use local groups only on computers that are not part of a domain. You cannot create local groups on a domain controller. Local groups can contain only user accounts that reside on that computer. Local groups cannot belong to any other group.

24 Creating Local Groups

25 Adding Members to a Group Use the Add button in the New Group dialog box when you create a new local group. Use the Computer Management snap-in to add members to an existing local group. Use the Members Of tab in the Properties dialog box of a user account.

26 Adding a User to Multiple Groups 1. Start the Computer Management snap-in. 2. Expand System Tools and Local Users And Groups. 3. Double-click Users. 4. In the details pane, right-click the user account you want to add to several groups, and then click Properties. 5. Click the Member Of tab, and then click Add. 6. In the Select Groups dialog box, in the Enter The Object Names To Select text box, type the names of the groups you want to add the user to. If you use multiple groups, separate the group names by semicolons.

27 Deleting Local Groups

28 Built-In Local Groups Administrators Backup Operators Guests Power Users Replicator Users

29 Built-In System Groups Everyone Authenticated Users Creator Owner Network Interactive Anonymous Logon Dialup

30 Chapter Summary Local user accounts let users log on and access resources only on the computer where the local user account was created. Do not create local user accounts in a domain environment. Domain user accounts let users log on to the domain and access resources anywhere on the network. You create a domain user account in the copy of the Active Directory service database (the directory) on a domain controller. Windows XP Professional creates built-in user accounts, such as Administrator and Guest, that cannot be deleted.

31 Chapter Summary (Cont.) Local user accounts must be unique on the local computer. They can contain up to 20 characters. They cannot contain the following characters: “ / \ [ ] : ; | =, + * ? Local user logon names are not case sensitive, but passwords are case sensitive. The User Accounts tool and the Computer Management snap-in are two tools for creating and managing user accounts and groups. Groups simplify administration by allowing you to assign permissions and rights to a group of users rather than to individual user accounts.