Module 2 managing user and computer accounts
Download
1 / 42

Module 2. Managing user and computer accounts. - PowerPoint PPT Presentation


  • 628 Views
  • Updated On :

Module 2: Managing User and Computer Accounts Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties Creating a User Account Template Managing User and Computer Accounts

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'Module 2. Managing user and computer accounts.' - Gabriel


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript

Overview l.jpg
Overview

  • Creating User Accounts

  • Creating Computer Accounts

  • Modifying User and Computer Account Properties

  • Creating a User Account Template

  • Managing User and Computer Accounts

  • Using Queries to Locate User and Computer Accounts in Active Directory


Lesson creating user accounts l.jpg
Lesson: Creating User Accounts

  • What Is a User Account?

  • Names Associated with Domain User Accounts

  • Guidelines for Creating a User Account Naming Convention

  • User Account Placement in a Hierarchy

  • User Account Password Options

  • When to Require or Restrict Password Changes

  • Tools to Create User Accounts

  • Practice: Creating User Accounts

  • Best Practices for Creating User Accounts


What is a user account l.jpg
What Is a User Account?

Local user accounts (stored on local computer)

Domain user accounts (stored in Active Directory)

Windows Server 2003 Domain

Multimedia: Types of User Accounts



Guidelines for creating a user account naming convention l.jpg
Guidelines for Creating a User Account Naming Convention

A convention for naming user accounts should accommodate:

  • Employees with identical names

  • Different types of employees, such as temporary or contract employees


User account placement in a hierarchy l.jpg
User Account Placement in a Hierarchy

North America

Accounting

Users

Users

South America

Sales

Users

Users

Geopolitical Design

Business Design




Tools to create user accounts l.jpg
Tools to Create User Accounts

Tools available to create user accounts

  • Active Directory Users and Computers

  • Command-line utilities

    • Dsadd

    • Net user

  • Batch utilities

    • CSVDE

    • LDIFDE

  • Computer Management MMC to create local users


Practice creating user accounts l.jpg
Practice: Creating User Accounts

In this practice, you will:

  • Create a local user account by using Computer Management

  • Create a domain account by using Active Directory Users and Computers

  • Create a domain user account by using dsadd


Best practices for creating user accounts l.jpg
Best Practices for Creating User Accounts

Best practices for creating local user accounts

  • Limit the number of people who can log on locally

  • Rename the Administrator account

  • Use strong passwords

Best practices for creating domain user accounts

  • Do not use the Users container for ordinary user accounts

  • Disable any account that will not be used immediately

  • Require users to change their passwords the first time that they log on


Lesson creating computer accounts l.jpg
Lesson: Creating Computer Accounts

  • What Is a Computer Account?

  • Why Create a Computer Account?

  • Where Computer Accounts Are Created in a Domain

  • Computer Account Options

  • Practice: Creating a Computer Account


What is a computer account l.jpg
What Is a Computer Account?

  • Identifies a computer in a domain

  • Provides a means for authenticating and auditing computer access to the network and to domain resources

  • Is required for every computer running:

    • Windows Server 2003

    • Windows XP Professional

    • Windows 2000

    • Windows NT


Why create a computer account l.jpg
Why Create a Computer Account?

  • Security

    • Authentication

    • Auditing

  • Management

    • Software deployment

    • Desktop management

    • Hardware and software inventory through Systems Management Server


Where computer accounts are created in a domain l.jpg
Where Computer Accounts Are Created in a Domain

Computers that join a domain are created in the Computers container

Computer accounts can be moved to

or created in other organizational units



Practice creating a computer account l.jpg
Practice: Creating a Computer Account

In this practice, you will:

  • Create a computer account by using Active Directory Users and Computers

  • Create a computer account by using dsadd


Lesson modifying user and computer account properties l.jpg
Lesson: Modifying User and Computer Account Properties

  • When to Modify User and Computer Account Properties

  • Properties Associated with User Accounts

  • Renaming a User Account

  • Properties Associated with Computer Accounts

  • Practice: Modifying User and Computer Account Properties


When to modify user and computer account properties l.jpg
When to Modify User and Computer Account Properties

Modify user account properties to:

  • Make it easier to use search capabilities to find users

  • Match a company’s organizational hierarchy

  • Determine the group membership of a user account

Modify computer account properties to:

  • Assist in asset tracking (Location property)

  • Document who manages a computer (Managed By property)


Properties associated with user accounts l.jpg
Properties Associated with User Accounts

The Properties dialog box for a user account contains:


Renaming a user account l.jpg
Renaming a User Account

The Rename User dialog box


Properties associated with computer accounts l.jpg
Properties Associated with Computer Accounts

The Properties dialog box for a computer account contains:


Practice modifying user and computer account properties l.jpg
Practice: Modifying User and Computer Account Properties

In this practice, you will modify userand computer account properties


Lesson creating a user account template l.jpg
Lesson: Creating a User Account Template

  • What Is a User Account Template?

  • What Properties Are in a Template?

  • Guidelines for Creating User Account Templates

  • Practice: Creating a User Account Template


What is a user account template l.jpg
What Is a User Account Template?

  • Employs a user account with properties meeting common user requirements

  • Makes creating user accounts with standardized configurations more efficient

User AccountTemplate



Guidelines for creating user account templates l.jpg
Guidelines for Creating User Account Templates

  • Create a separate classification for each department

  • Create a separate group for short-term and temporary employees

  • Set user account expiration dates for short-term and temporary employees

  • Disable the account template

  • Identify the account template


Practice creating a user account template l.jpg
Practice: Creating a User Account Template

In this practice, you will create a user account template


Lesson managing user and computer accounts l.jpg
Lesson: Managing User and Computer Accounts

  • Why Enable or Disable User and Computer Accounts?

  • What Are Locked-Out User Accounts?

  • When to Reset User Passwords

  • When to Reset Computer Accounts

  • Practice: Resetting and Disabling a User Account


Why enable or disable user and computer accounts l.jpg
Why Enable or Disable User and Computer Accounts?

Scenarios for disabling accounts

  • User takes a leave of absence

  • Creating accounts that will not be used immediately

Tools available for disabling or enabling accounts

  • Active Directory Users and Computers

  • Dsmod command


What are locked out user accounts l.jpg
What Are Locked-Out User Accounts?

  • Account lockout thresholds:

    • Define the number of failed logon attempts

    • Prevent hackers from guessing user passwords

  • Logon failures can occur:

    • At the logon screen

    • At a screen saver protected by a password

    • When accessing network resources


When to reset user passwords l.jpg
When to Reset User Passwords

  • Reset a password when a user forgets his or her password

  • After the local user’s password has been reset, the user can no longer access some types of information


When to reset computer accounts l.jpg
When to Reset Computer Accounts

Reset computer accounts when:

  • Computers fail to authenticate to the domain

  • Passwords need to be synchronized


Practice resetting and disabling a user account l.jpg
Practice: Resetting and Disabling a User Account

In this practice, you will:

  • Reset a user account password

  • Disable user accounts


Lesson using queries to locate user and computer accounts in active directory l.jpg
Lesson: Using Queries to Locate User and Computer Accounts in Active Directory

  • Multimedia: Introduction to Locating User and Computer Accounts in Active Directory

  • Search Types

  • What Is a Saved Query?

  • Importing and Exporting Saved Queries

  • Practice: Using Saved Queries to Locate Users and Computers in Active Directory


Multimedia introduction to locating user and computer accounts in active directory l.jpg
Multimedia: Introduction to Locating User and Computer Accounts in Active Directory

This presentation will explain how to locate objects in Active Directory


Search types l.jpg
Search Types Accounts in Active Directory

Basic query criteria include:

  • Object type

  • Location

  • General values associated with the object, such as name and description


What is a saved query l.jpg
What Is a Saved Query? Accounts in Active Directory


Importing and exporting saved queries l.jpg
Importing and Exporting Saved Queries Accounts in Active Directory


Practice using queries to locate users and computers in active directory l.jpg

In this practice, you will: Accounts in Active Directory

Create a query to find computer accounts in the sales department

Export the query as an XML file in the Admin_tools shared folder

Practice: Using Queries to Locate Users and Computers in Active Directory


Lab managing user and computer accounts l.jpg
Lab: Managing User and Computer Accounts Accounts in Active Directory

In this lab, you will:

  • Create user accounts

  • Create computer accounts

  • Use queries to locate objects

  • Modify user and computer properties


ad