Creating and Managing User Accounts (創(chuàng)建和管理用戶賬號課件

1、Creating and Managing User Accounts OverviewIntroduction to User AccountsGuidelines for New User AccountsCreating Local User AccountsCreating and Configuring Domain User AccountsSetting Properties for Domain User AccountsCustomizing User Settings with User ProfilesBest PracticesIntroduction to User

2、AccountsDomain User AccountsEnable users to log on to the domain to gain access to network resourcesReside in Active DirectoryLocal User AccountsEnable users to log on and access resources on a specific computerReside in SAMBuilt-in User AccountsEnable users to perform administrative tasks or gain t

3、emporary access to network resources Reside in SAM (local built-in user accounts)Reside in Active Directory (domain built-in user accounts)Administrator and Guest Guidelines for New User AccountsNaming ConventionsPassword GuidelinesAccount OptionsNaming ConventionsUser Logon Names and Full Names Mus

4、t Be UniqueUser Logon Names:Can contain up to 20 charactersCan include a combination of special alphanumeric charactersA Naming Convention Should:Accommodates duplicate employee namesIdentifies temporary employeesPassword GuidelinesAssign a Password for the Administrator AccountDetermine Who Has Con

5、trol over PasswordsEducate Users on How to Use PasswordsAvoid obvious associations, such as a family nameUse long passwordsUse a combination of uppercase and lowercase charactersAccount OptionsSet Logon Hours to Match Users Work HoursSpecify the Computers from Which a User Can Log OnDomain users can

6、 log on at any computer in the domain, by defaultDomain users can be restricted to specific computers to increase securitySpecify When a User Account ExpiresCreating Local User AccountsCreated on Computers Running Windows 2000 Professional Created on Stand-alone or Member Servers Running Windows 200

7、0 Server or Windows 2000 Advanced ServerReside in SAMNew UserUser name:JYoungFull name:Description:Jonathan Young Password:*Confirm:*User must change password at next logonUser cannot change passwordPassword never expiresAccount is disabledCloseCreateLocal User Accounts Are: Creating and Configuring

8、 Domain User AccountsInstalling Windows 2000 Administration ToolsCreating a Domain User AccountSetting Password RequirementsManaging User Data by Creating Home FoldersSetup optionsSelect the action you want the Setup Wizard to perform.Uninstall the Administrative ToolsClick an option and then click

9、Next.Install all of the Administrative ToolsDescriptionInstall / Reinstall all components of the Windows 2000Administration Tools.Windows 2000 Administration Tools Setup Wizard BackActive Directory Domains and TrustsActive Directory Sites and ServicesActive Directory Users and ComputersComponent Ser

10、vicesComponent ManagementConfigure your SeverData Sources (ODBC)DHCPDistributed DNSDomain Controller Security PolicyDomain Security PolicyEvent ViewerInternet Services ManagerLicensingLocal Security PolicyPerformanceRouting and Remote AccessServer Extensions AdministratorServicesTelnet Server Admini

11、strationInstalling Windows2000 Administration ToolsThe tools appear on the Administrative Tools menuAfter you install Administration Tools, use the runas command to run the tools Creating a Domain User AccountConsoleActive Directory Users and ComputersWindowHelpActionViewTreeNameTypeDescriptionUsers

12、 20 objectsActive Directory Users and Compnwtraders.msftBuiltinComputersDomain ControllersForeignSecurityPrincipalsLostAndFoundSystemUsersAdministratorCert PublishersDNSAdminsDNSUpdateProxyDomain AdminsDomain ComputersDomain ControllersDomain GuestsUserSecurity Group - GlobalSecurity Group - Domain

13、LocalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalBuilt-in accountEnterprise certiDNS clients whoDesignated admAll workstationsAll domain contAll domain guesDNS AdministraFindNewAll TasksViewNew Window from HereRefreshExport ListP

14、ropertiesHelpComputerContactGroupPrinterShared FolderUserCreate in: nwtraders.msft/UsersFirst name:Last name:Full name:JudyLewJudy A. LewInitials:AUser logon name:judy1nwtraders.msftUser logon name (pre-Windows 2000):NWTRADERSjudy1CancelDelegate ControlNew Object - UserSetting Password RequirementsN

15、ew Object - UserCreate in: nwtraders.msft/UsersPassword:Confirm Password:CancelUser must change password at next logonUser cannot change passwordPassword never expiresAccount is disabled*Managing User Data by Creating Home FoldersConsider the Following WhenYou Create a Home Folder:Backup and restore

16、 capabilitySufficient space on the serverSufficient space on users computersNetwork performanceTo Create a Home Folder:Create a shared folder on a serverAssign the appropriate permissionProvide a path for the user accountHomeUser1User2User3Setting Properties for Domain User AccountsSetting Personal

17、PropertiesSetting Account PropertiesSpecifying Logon OptionsCopying Domain User Accounts Creating User Account TemplatesSetting Personal PropertiesActive DirectoryAdd Personal Information About Users As Stored in Active Directory Use Personal Properties to Search Active DirectoryStudent 01 Propertie

18、sRemote controlUser01Terminal Services ProfileMember OfDial-inEnvironmentSessionsGeneralAddressAccountProfileTelephonesOrganizationSetting Account Properties User02 UserUser03UserUser04UserUser05UserUser06User User01UserUse 01 PropertiesRemote controlTerminal Services ProfileMember OfDial-inEnvironm

19、entSessionsGeneralAddressAccountProfileTelephonesOrganizationnwtraders.msftUser01User logon name:User logon name (pre-Windows 2000):NWTRADERSAccount is locked outLogon HoursStudent01Log On To Account options:User must change password at next logonUser cannot change passwordPassword never expiresStor

20、e password using reversible encryptionAccount expires:NeverEnd of:Wednesday, November 24, 1999OKCancelApplyCopyAdd members to a groupReset PasswordDisable AccountMoveOpen home pageSend mailSend mailDeleteRenameRefreshPropertiesHelpSpecifying Logon OptionsLogon Hours for User01OKCancel12 12 12 246810

21、246810.Logon PermittedLogon DeniedAllSundayMondayTuesdayWednesdayThursdayFridaySaturday DefaultLogon WorkstationsThis feature requires the NetBIOS protocol. In Computer name, type the pre-Windows 2000 computer name.This user can log on to:All computersThe following computersComputer name:BrisbanePer

22、thOKCancelAddEditRemoveCopying Domain User AccountsCopy an Existing Domain User Account to Simplify the Process of Creating a New Domain User Account.DomainUserAccount(User1)DomainUserAccount(User2)CopyDomain User2Domain User1Creating User Account TemplatesConsoleActive Directory Users and Computers

23、WindowHelpActionViewTreeNameTypeDescriptionUsers 28 objectsActive Directory Users and Compunwtraders.msftBuiltinCasablancaComputersDenver OUDomain ControllersForeignSecurityPrincipalsAdministratorCert PublishersDHCP AdministratorsDHCP UsersDnsAdminsDnsUpdateProxyDomain AdminsDomain Computersount fce

24、rtifio havo havstratowho UsersPortlandSeattleStudentOUTunisVancouver OUDomain ControllersDomain GuestsDomain UsersEnterprise AdminsGroup 01_Sales TemplateUserCopyAdd members to a groupEnable AccountReset PasswordMoveOpen home pageSend mailAll TasksDeleteRenameRefreshPropertiesHelpCreates a new user,

25、 copying information from the selected user. admiionsontrouestaseradmiCopy Object - UserCreate in: nwtraders.msft/UsersFirst name:Last name:Full name:salesuser1sales user1Initials:User logon name:salesuser1nwtraders.msftUser logon name (pre-Windows 2000):NWTRADERSsalesuser1CancelSet Up a User Accoun

26、t as a Template AccountCreate a User Account by Coping the Template Account Customizing User Settings with User ProfilesUser ProCreating Roaming and Mandatory Roaming User ProfilesUser ProDefault User ProfileServes as the bases for alluser profiles Local User ProfileCreated the First Time a User Log

27、s on to a ComputerStored on a Computers Local Hard Disk UserProfileDisplayRegionalSettingsMouseSoundsModifySaveRoaming User ProfileCreated by the System AdministratorStored on a server Mandatory User ProfileCreated by the System AdministratorStored on a server ProfileWindows 2000ClientWindows 2000ClientWindows 2000ClientProfileServerDisplayRegionalSe