Adding a User Account


Adding a User Account

You need to create a user account for each user who wants to use your network resources. You create domain user accounts with Active Directory Users And Computers. You create local user accounts with Local Users And Groups.

Creating Domain User Accounts

Generally, there are two ways to create new domain accounts:

  • Create a completely new user account

    Create a completely new account by right-clicking the container in which you want to place the user account, choosing New, and then selecting User. This opens the New Object - User Wizard shown in Figure 9-8. When you create a new account, the default system settings are used.

  • Base the new account on an existing account

    Right-click the user account you want to copy in Active Directory Users And Computers, and then select Copy. This starts the Copy Object - User Wizard, which is essentially the same as the New User dialog box. However, when you create a copy of an account, the new account gets most of its environment settings from the existing account. For more information on copying accounts, see the section entitled "Copying Domain User Accounts" in Chapter 10 , "Managing Existing User and Group Accounts."

Once either the New Object - User Wizard or the Copy Object - User Wizard is started, you can create the account by completing the following steps:

  1. As shown in Figure 9-8, the first wizard page lets you configure the user display name and logon name .

    Figure 9-8. Configure the user display and logon names .

    graphics/f09ap08.jpg

  2. Type the user's first name, middle initial, and last name in the fields provided. These fields are used to create the full name, which is the user's display name.

  3. Make changes to the Full Name field as necessary. For example, you might want to type the name in LastName FirstName MiddleInitial format or in FirstName MiddleInitial LastName format. The full name must be unique in the domain and must be 64 characters or less.

  4. In User Logon Name, type the user's logon name. Then use the drop-down list to select the domain the account is to be associated with. This sets the fully qualified logon name.

  5. The first 20 characters of the logon name are used to set the pre “Windows 2000 logon name. This logon name must be unique in the domain. If necessary, change the pre “Windows 2000 logon name.

  6. Click Next . Then configure the user's password using the dialog box shown in Figure 9-9. The options for this dialog box are used as follows :

    • Password The password for the account. This password should follow the conventions of your password policy.

    • Confirm Password A field to ensure that you assign the account password correctly. Simply reenter the password to confirm it.

    • User Must Change Password At Next Logon If selected, the user must change the password upon logon.

    • User Cannot Change Password If checked, the user can't change the password.

    • Password Never Expires If selected, the password for this account never expires. This setting overrides the domain account policy. Generally, it's not a good idea to set a password so it doesn't expire because this defeats the purpose of having passwords in the first place.

    • Account Is Disabled If checked, the account is disabled and can't be used. Use this field to temporarily prevent anyone from using an account.

      Figure 9-9. Use the New Object - User Wizard to configure the user's password.

      graphics/f09ap09.jpg

  7. Click Next and then click Finish to create the account. If there are problems creating the account, you'll see a warning and you'll need to use the Back button to retype information in the user name and password dialog boxes, as necessary.

Once the account is created, you can set advanced properties for the account as discussed later in this chapter.

Creating Local User Accounts

You create local user accounts with Local Users And Groups. You can access this utility and create an account by completing the following steps:

  1. Choose Start, then Programs or All Programs as appropriate, then Administrative Tools, and then Computer Management. Or select Computer Management in the Administrative Tools folder.

  2. Right-click the Computer Management entry in the console tree and select Connect To Another Computer on the shortcut menu. You can now choose the system whose local accounts you want to manage. Domain controllers don't have local users and groups.

  3. Expand the System Tools node by clicking the plus sign (+) next to it, and then choose Local Users And Groups.

  4. Right-click Users and then select New User. This opens the New User dialog box shown in Figure 9-10. You use each of the fields in the dialog box as follows:

    • User Name The logon name for the user account. This name should follow the conventions for the local user name policy.

    • Full Name The full name of the user, such as William R. Stanek.

    • Description A description of the user. Normally you'd type the user's job title, such as Webmaster. You could also type the user's job title and department.

    • Password The password for the account. This password should follow the conventions of your password policy.

    • Confirm Password A field to ensure that you assign the account password correctly. Simply reenter the password to confirm it.

    • User Must Change Password At Next Logon If selected, the user must change the password upon logon.

    • User Cannot Change Password If checked, the user can't change the password.

    • Password Never Expires If selected, the password for this account never expires. This setting overrides the local account policy.

    • Account Is Disabled If checked, the account is disabled and can't be used. Use this field to temporarily prevent anyone from using an account.

      Figure 9-10. Configuring a local user account is different from configuring a domain user account.

      graphics/f09ap10.jpg

  5. Click Create when you're finished configuring the new account.



Microsoft Windows Server 2003 Administrator[ap]s Pocket Consultant
Microsoft Windows Server 2003 Administrator[ap]s Pocket Consultant
ISBN: 735622450
EAN: N/A
Year: 2003
Pages: 141

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net