1. User Manager for Domains

2.  Manages the user accounts in a domain  It is located in the PDC  While User Manager exists in each NT machine, but it is local to each machine  Its core is a shared database of users  SAM (Security Access Manager)  part of the PDC registry

3. UMD Functions  Create, modify, and delete user accounts in the domain  Define user’s desktop environment and network connections  Assign logon scripts to user accounts  Manage groups and trust relationships  Manage a domain’s security policies  Changes only take effect after user logs off and logs on

4. User manager main screen and user properties  The main screen is shown herehere  User properties  account type and expiration date  Username, Password and Full Name  Logon script, workstations and hours  Profile  User accounts are assigned a SID (security identifier) when created -- never reused  looks like: S-1-5-D1-D2-D3-RID

5. Guest account security  Guest account is NOT secure like in UNIX  You cannot delete the guest account, but you should be sure it is disableddisabled  DOS, WFW and Windows 95 do not require login to a domain  NT WS does require but you can log to the local machine and to the network with guest privileges if Guest is enabled  Guest is member of the Everyone group.

6. Creating an user account  The process is graphical-oriented  New user dialog (the one shown is missing the hours, logon and account icons)shown  Assigning group membership dialogdialog  by default an user can log any time in any workstation, but you can change this  You can set logon expiration of passwords  You should setup the user home directory, logon script name and profile path  Of course you can copy user accounts and rename them (templates)

7. Managing Security Policies  Account, characteristics of passwords Account  User Rights, which user or group is assigned what system rights User Rights  Audit, what kind of security events are to be logged Audit  Trust Relationships, how domains interact (not shown)

8. System Policy Editor  Automatically installed in the NT Server, not in workstations see it here here  You can set a variety of restrictions to users  their desktop color and wallpaper settingswallpaper  their control panel display accessdisplay  their system accesssystem  many shell characteristicsshell  DON’T try it if you are not an experienced administrator, and don’t touch default user and computer