1. Chapter 7 Server Management Policies –User accounts –Groups Rights and permissions Examples

2. User Account Policies Password expiration Password length Password history (NT memorization) Unsuccessful logon attempts and account lockout User home directories

3. Group (Account) Policies Local groups (accounts) in a domain Global groups (accounts) across domains –Domain administrators –Domain users –Domain guests Global groups belong to local group

4. Rights and Permissions to Group Rights –Perform tasks in the domain –Only Administrator has the right to grant right Permissions –Access files and/or directories

5. Rights - I Users –Access computer from network Administrator, operator –Add workstation to domain –Back up files and directories –Change the system time –Force shutdown from a remote system –Load and unload device drivers

6. Rights - II Administrator, operator –Manage auditing and security log –Restore files and directories –Shutdown the system –Take ownership of files or other objects –Log on locally (to a server)

7. Assignment Review chapters 1-7 Read chapter 8

8. Example - Setting Account Policies Start Program Administration Tools User Manager for Domains Policies Account Set –Maximum Password Age (never expire) –Minimum Password Age –Allow Change Immediately –Minimum Password Length (5 characters) –Password Uniqueness (2) –Account Lockout (3)

9. Example - Creating Accounts - I Start Program Administrative Tools User Manager for Domains User New User Set –User name –Full name –Description (job title) –Password

10. Example - Creating Accounts - II Group button Administrators group Add OK Profile button Connect (enter H) To (\USERS\your last name) OK

11. Example - Creating Accounts - III Hours button Allow or Disallow (after mark the hours) OK Logon To button (limit location of logon) OK Account button Account Expires Account Type OK

12. Example - Creating Accounts - IV Dialing button (control remote access) OK Add

13. Example - Creating Accounts - I New Account Setup Wizard Start Program Administrative Tools Administrative Wizards Add User Accounts

14. Example - Creating Groups - I Start Program Administrative Tools User Manager for Domains User New Global group Enter –Group name –Description Highlight member’s name Add OK

15. Example - Creating Groups - I Group Management Setup Wizard Start Program Administrative Tools Group Management Create a New Group and Add Members

16. Example - Rights Start Program Administrative Tools User Manager for Domains Policies Highlight (user name) User Rights Highlight (right) Add Highlight (group) Add OK