Upload File

module 2: managing user and computer accounts. overview creating user accounts creating computer...

  • Home
  • Documents
  • Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties
55
Module 2: Managing User and Computer Accounts

Upload: avice-flora-rice

Post on 24-Dec-2015

242 views

Category:

Documents


1 download

Report

Tags:

TRANSCRIPT

Page 1: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Module 2: Managing User and Computer Accounts

Page 2: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Overview

Creating User Accounts

Creating Computer Accounts

Modifying User and Computer Account Properties

Creating a User Account Template

Enabling and Unlocking User and Computer Accounts

Resetting User and Computer Accounts

Locating User and Computer Accounts in Active Directory

Saving Queries

Page 3: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Creating User Accounts

What Is a User Account?

Names Associated with Domain User Accounts

Guidelines for Creating a User Account Naming Convention

User Account Placement in a Hierarchy

User Account Password Options

When to Require Password Changes

How to Create User Accounts

Best Practices for Creating User Accounts

Page 4: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

What Is a User Account?

Multimedia: Types of User AccountsMultimedia: Types of User Accounts

Domain user accounts (stored in Active Directory)Domain user accounts (stored in Active Directory)

Local user accounts (stored on local computer)Local user accounts (stored on local computer)

Windows Server 2003 Domain

Page 5: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Names Associated with Domain User Accounts

Name Example

User logon name Jayadams

Pre-Windows 2000 logon name Nwtraders\jayadams

User principal logon name [email protected]

LDAP relative distinguished name

CN=jayadams,CN=users,dc=nwtraders,dc=msft

Page 6: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Guidelines for Creating a User Account Naming Convention

A convention for naming user accounts should accommodate:A convention for naming user accounts should accommodate:

Employees with duplicate namesEmployees with duplicate names

Different types of employees, such as temporary or contract employeesDifferent types of employees, such as temporary or contract employees

Page 7: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

User Account Placement in a Hierarchy

Geopolitical DesignGeopolitical Design

Users

North America

Users

South America

Business DesignBusiness Design

Users

Accounting

Users

Sales

Page 8: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

User Account Password Options

Account options Description

User must change password at next logon

Users must change their passwords the next time they log on to the network

User cannot change password

A user does not have the permissions to change their own password

Password never expires A user password is prevented from expiring

Account is disabled

A user cannot log on by using the selected account

Page 9: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

When to Require or Restrict Password Changes

Option Use this option when you:

Require password changes

Create new domain accountsReset passwords

Restrict password changes

Create local and domain service accountsCreate new local accounts that will not log on locally

Page 10: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Create User Accounts

Your instructor will demonstrate how to:Your instructor will demonstrate how to:

Create a domain user account

Create a local user account

Create a domain user account

Create a local user account

Page 11: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Creating User Accounts

In this practice, you will:

Create a local user account by using Computer Management

Create a domain account by using Active Directory Users and Computers

Create a domain user account by using Run as

Create a domain user account by using dsadd

Page 12: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Best Practices for Creating User Accounts

Best practices for creating local user accountsBest practices for creating local user accounts

Do not enable the Guest accountDo not enable the Guest account

Limit the number of people who can log on locallyLimit the number of people who can log on locally

Best practices for creating domain user accountsBest practices for creating domain user accounts

Disable an account that will not be used immediatelyDisable an account that will not be used immediately

Require users to change their passwords the first time that they log onRequire users to change their passwords the first time that they log on

Page 13: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Creating Computer Accounts

What Is a Computer Account?

Why Create a Computer Account?

Where Computer Accounts Are Created in a Domain

Computer Account Options

How to Create a Computer Account

Page 14: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

What Is a Computer Account?

Identifies a computer in a domain

Provides a means for authenticating and auditing computer access to the network and to domain resources

Is required for every computer running:

Windows Server 2003

Windows XP Professional

Windows 2000

Windows NT

Page 15: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Why Create a Computer Account?

Security

Authentication

IPSec

Auditing

Management

Active Directory features:Software deploymentDesktop management

Hardware and software inventory through SMS

Page 16: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Where Computer Accounts Are Created in a Domain

Computers that join a domain are created in the Computers containerComputers that join a domain are created in the Computers container

Computer accounts can be moved toor created in other organizational unitsComputer accounts can be moved toor created in other organizational units

Page 17: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Computer Account Options

Page 18: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Create a Computer Account

Your instructor will demonstrate how to:Your instructor will demonstrate how to:

Create a computer account by using Active Directory Users and Computers

Create a computer account by using dsadd

Create a computer account by using Active Directory Users and Computers

Create a computer account by using dsadd

Page 19: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Creating a Computer Account

In this practice, you will

Create a computer account by using Active Directory Users and Computers

Create a computer account by using dsadd

Page 20: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Modifying User and Computer Account Properties

When to Modify User and Computer Account Properties

Properties Associated with User Accounts

Properties Associated with Computer Accounts

How to Modify User and Computer Account Properties

Page 21: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

When to Modify User and Computer Account Properties

Modify user account properties to:Modify user account properties to:

Make it easier to use search capabilities to find users

Match a company’s organizational hierarchy

Determine the group membership of a user account

Make it easier to use search capabilities to find users

Match a company’s organizational hierarchy

Determine the group membership of a user account

Modify computer account properties to:Modify computer account properties to:

Assist in asset tracking (Location property)

Document who manages a computer (Managed By property)

Assist in asset tracking (Location property)

Document who manages a computer (Managed By property)

Page 22: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Properties Associated with User Accounts

The Properties dialog box for a user account contains:

Page 23: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Properties Associated with Computer Accounts

The Properties dialog box for a computer account contains:

Page 24: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Modify User and Computer Account Properties

Your instructor will demonstrate how to modify user and computer accountsYour instructor will demonstrate how to modify user and computer accounts

Page 25: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Modifying User and Computer Account Properties

In this practice, you will modify user and computer account properties

Page 26: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Creating a User Account Template

What Is a User Account Template?

What Properties Are in a Template?

Guidelines for Creating User Account Templates

How to Create a User Account Template

Page 27: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

What Is a User Account Template?

A user account template is a user account that contains the properties that apply to users with common requirements

User account templates make creating user accounts with standardized configurations more efficient

User AccountTemplate

User AccountTemplate

Page 28: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

What Properties Are in a Template?

Tab Properties copied

Address All properties except Street Address

Account All properties except Logon Name

ProfileAll properties, except Profile path and Home folder, reflect new user’s logon name

Organization All properties except Title

Member Of All properties

Page 29: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Guidelines for Creating User Account Templates

Create a separate classification for each departmentCreate a separate classification for each department

Create a separate group for short-term and temporary employeesCreate a separate group for short-term and temporary employees

Set user account expiration dates for short-term and temporary employeesSet user account expiration dates for short-term and temporary employees

Disable the account templateDisable the account template

Identify the account templateIdentify the account template

Page 30: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Create a User Account Template

Your instructor will demonstrate how to create a user account templateYour instructor will demonstrate how to create a user account template

Page 31: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Creating a User Account Template

In this practice, you will create a user account template

Page 32: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Enabling and Unlocking User and Computer Accounts

Why Enable and Disable User and Computer Accounts?

How to Enable and Disable User and Computer Accounts

What Are Locked-out User Accounts?

How to Unlock User Accounts

Page 33: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Why Enable or Disable User and Computer Accounts?

Page 34: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Enable and Disable User and Computer Accounts

Your instructor will demonstrate how to enable and disable user and computer accountsYour instructor will demonstrate how to enable and disable user and computer accounts

Page 35: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

What Are Locked-out User Accounts?

The account lockout threshold:

Defines the number of failed logon attempts

Prevents hackers from guessing user passwords

An account can exceed the account lockout threshold by too many failed logon attempts:

At the logon screen At a screen saver protected

by a password When accessing network

resources

Page 36: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Unlock User Accounts

Your instructor will demonstrate how to unlock user accountsYour instructor will demonstrate how to unlock user accounts

Page 37: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Enabling and Disabling User and Computer Accounts

In this practice, you will enable and disable a user account and computer account

Page 38: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Resetting User and Computer Accounts

When to Reset Passwords

How to Reset Passwords

When to Reset Computer Accounts

How to Reset Computer Accounts

Page 39: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

When to Reset User Passwords

Reset a password when a user forgets his or her password

After resetting a password, a user can no longer access some types of information, including:

E-mail that is encrypted with the user’s public key

Internet passwords that are saved on the computer

Files that the user has encrypted

Page 40: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Reset User Passwords

Your instructor will demonstrate how to reset user passwordsYour instructor will demonstrate how to reset user passwords

Page 41: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

When to Reset Computer Accounts

Reset computer accounts when:

Computers fail to authenticate to the domain

Passwords need to be synchronized

Page 42: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Reset Computer Accounts

Your instructor will demonstrate how to reset computer accountsYour instructor will demonstrate how to reset computer accounts

Page 43: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Resetting a User Account Password

In this practice, you will reset the password for a user account

Page 44: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Locating User and Computer Accounts in Active Directory

Multimedia: Introduction to Locating User and Computer Accounts in Active Directory

Search Types

How to Search for Active Directory Objects

How to Search Using Common Queries

Using a Custom Query

Page 45: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Multimedia: Introduction to Locating User and Computer Accounts in Active Directory

This presentation will explain how to locate objects in Active Directory

Page 46: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Search Types

Basic query criteria include:

Object type

Location

General values associated with the object, such as name and description

Page 47: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Search for Active Directory Objects

Your instructor will demonstrate how to search for Active Directory objectsYour instructor will demonstrate how to search for Active Directory objects

Page 48: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Search Using Common Queries

Your instructor will demonstrate how to search for Active Directory objects by using common queriesYour instructor will demonstrate how to search for Active Directory objects by using common queries

Page 49: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Using a Custom Query

(&(&(objectCategory=user)(l=Denver)(&(objectCategory=person)(objectClass=user)(userAccountControl=1.2.840.113556.1.4.803:=2))))

Page 50: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Locating User and Computer Accounts

In this practice, you will locate user and computer accounts that meet specific criteria

Page 51: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lesson: Saving Queries

What Is a Saved Query?

How to Create a Saved Query

Page 52: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

What Is a Saved Query?

Page 53: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

How to Create a Saved Query

Your instructor will demonstrate how to create a saved queryYour instructor will demonstrate how to create a saved query

Page 54: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Practice: Creating Saved Queries

In this practice, you will create a saved query for a user account

Page 55: Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties

Lab A: Managing User and Computer Accounts

In this lab, you will:

Create user and computer accounts

Move user and computer accounts

Enable user accounts


Managing User Accounts - Cisco · Managing User Accounts Managing user accounts involves account creation and user permissions: • Account Creation, page 8-1. Your account can be

WORKING WITH COMPUTER ACCOUNTS

User accounts

Microsoft - Introduction · Web viewActive Directory stores information about a variety of objects in the network. Importantly, user accounts, computer accounts, groups, and all related

Module 4: Implementing User, Group, and Computer Accounts

1 Chapter Overview Creating User and Computer Objects Maintaining User Accounts Creating User Profiles

Managing User, Computer and Group Accounts Lecture 5

Accounts Receivable User Procedures

Forms Authentication, Authorization, User Accounts, and …download.microsoft.com/.../aspnet_tutorial02_FormsAuth_vb.pdf · Forms Authentication, Authorization, User Accounts, and

SAuth: Protecting User Accounts from Password Database Leaks · SAuth: Protecting User Accounts from Password Database Leaks Georgios Kontaxis Dept. of Computer Science Columbia University

Banner Accounts Receivable / User Guide / 8 · Contents Banner Accounts Receivable 8.1 User Guide August 2009 Banner Accounts Receivable 8.1 iii User Guide Contents Chapter 1 System

SAP User Guide Accounts Payable

Computer Accounts

Accounts Receivable User Manual - APPX Software, Inc. · PDF file2 Accounts Receivable User Manual 1 General Information Introduction What Is Accounts Receivable? Accounts Receivable

ORACLE ACCOUNTS PAYABLES - ICARmisfms.icar.gov.in/TrainingManual/TM_ACCOUNTSPAYABLES.pdf · Oracle Accounts Payable – User Manual Version 20.0 ORACLE ACCOUNTS PAYABLES – User

Multiple User Accounts

User Accounts for FMC -

User Accounts & Security in windows

Your computer accounts

Accounts Receivables User Guide

Introducing Local User Accounts

66 User Accounts

CREATING USER ACCOUNTS Group accounts simplify administration by organizing user accounts into a single administrative unit. They provide a convenient

Multiple User Accounts -

Accounts Payable User Manual - APPX · PDF file2 Accounts Payable User Manual 1 General Information Introduction What Is Accounts Payable? Accounts Payable is a means by which

Pct Wipo Accounts User Guide

Fusion Accounts User Guide

Creating and Managing User Accounts. Overview Introduction to User Accounts Guidelines for New User Accounts Creating Local User Accounts Creating and

2.Managing User and Computer Accounts

ORCA Business Accounts User Guide

User Accounts in Drupal

Accounts Payable User Guide

Multiple User Accounts - Authorize.Net · Multiple User Accounts Merchant Preparation Guide Step 1: Verify Contact Information When the Multiple User Accounts feature is released

Award System User Guide for Schools - LOSFA · Navigating the Award System 6. User Accounts: o. Administrator Accounts o. Standard Accounts 7. How To… o. Work with User Accounts

User Guide - Morningstarupdates.morningstarcommodity.com/webservices/User Guide.pdf · 2019. 12. 6. · User Accounts User accounts in the Marketplace are identified by the users’