|
Security
Implement, configure, manage, and
troubleshoot account policy.
These policies apply to user accounts. This
security area contains attributes for:
-
Password policy: for domain or local
user accounts, determines settings for
passwords such as enforcement, and
lifetimes.
-
Account lockout policy: for domain or
local user accounts, determines when and
for whom an account will be locked out
of the system.
-
Kerberos policy: for domain user
accounts, determines Kerberos-related
settings, such as ticket lifetimes and
enforcement.
Create and manage local users and groups.
A local user or group is an account that can
be granted permissions and rights from your
computer, where as Domain or global users
and groups are managed by the network
administrator. You can add local users,
global users, and global groups to local
groups, but you cannot add local users and
groups to global groups.
By adding local users and groups you can
limit thier ability to perform certain
actions by assigning them rights and
permissions. A right authorizes a user to
perform certain actions on a computer, such
as backing up files and folders. A
permission is a rule associated with an
object usually a file, folder and it
regulates which users can have access to the
object.
Local Users and Groups is not available on
domain controllers. Use Active Directory
Users and Computers to manage global users
and groups.
To create a new user account
-
Open Computer Management.
-
In the console tree, in Local Users and
Groups, click Users.
-
Click Action, and then click New User.
-
Type the appropriate information in the
dialog box.
-
Select or clear the check boxes for:
-
User must change password at next
logon
-
User cannot change password
-
Password never expires
-
Account is disabled
-
To finish, click Create, and then click
Close.
A user name cannot be identical to any other
user or group name, It can contain up to 20
uppercase or lowercase characters except for
the following: " / \ [ ] : ; | = , + * ? < >
You can type a password containing up to 127
characters. However, if you're using Windows
2000 on a network that also has computers
using Windows 95 or Windows 98, consider
using passwords not longer than 14
characters. Windows 95 and Windows 98
support passwords of up to 14 characters.
To create a new local group
-
Open Computer Management.
-
In the console tree, in Local Users and
Groups, click Groups.
-
Click Action, and then click New Group.
-
In Group name, type a name for the new
group.
-
In Description, type a description of
the new group.
-
To finish, click Create, and then click
Close.
A local group name cannot be identical to
any other group or user name on the computer
being administered. It can contain up to 256
uppercase or lowercase characters except for
the following: " / \ [ ] : ; | = , + * ? < >
|
