CreatingandManagingUserAccounts(创建和管理用户账号.ppt

Creating and Managing User Accounts,Overview,Introduction to User Accounts Guidelines for New User Accounts Creating Local User Accounts Creating and Configuring Domain User Accounts Setting Properties for Domain User Accounts Customizing User Settings with User Profiles Best Practices,Introduction to User Accounts,Built-in User Accounts,Enable users to perform administrative tasks or gain temporary access to network resources Reside in SAM (local built-in user accounts) Reside in Active Directory (domain built-in user accounts),Administrator and Guest,Guidelines for New User Accounts,Naming Conventions Password Guidelines Account Options,Naming Conventions,User Logon Names and Full Names Must Be Unique User Logon Names: Can contain up to 20 characters Can include a combination of special alphanumeric characters A Naming Convention Should: Accommodates duplicate employee names Identifies temporary employees,Password Guidelines,Assign a Password for the Administrator Account Determine Who Has Control over Passwords Educate Users on How to Use Passwords Avoid obvious associations, such as a family name Use long passwords Use a combination of uppercase and lowercase characters,Account Options,Set Logon Hours to Match Users Work Hours Specify the Computers from Which a User Can Log On Domain users can log on at any computer in the domain, by default Domain users can be restricted to specific computers to increase security Specify When a User Account Expires,Creating Local User Accounts,Created on Computers Running Windows 2000 Professional Created on Stand-alone or Member Servers Running Windows 2000 Server or Windows 2000 Advanced Server Reside in SAM,Local User Accounts Are:,Creating and Configuring Domain User Accounts,Installing Windows 2000 Administration Tools Creating a Domain User Account Setting Password Requirements Managing User Data by Creating Home Folders,Installing Windows 2000 Administration Tools,The tools appear on the Administrative Tools menu After you install Administration Tools, use the runas command to run the tools,Creating a Domain User Account,DNS Administra,Delegate Control,New Object - User,Setting Password Requirements,New Object - User,Create in: nwtraders.msft/Users,Password:,Confirm Password:, Back,Next ,Cancel,User must change password at next logon,User cannot change password,Password never expires,Account is disabled,*,*,Managing User Data by Creating Home Folders,Consider the Following When You Create a Home Folder: Backup and restore capability Sufficient space on the server Sufficient space on users computers Network performance To Create a Home Folder: Create a shared folder on a server Assign the appropriate permission Provide a path for the user account,Setting Properties for Domain User Accounts,Setting Personal Properties Setting Account Properties Specifying Logon Options Copying Domain User Accounts Creating User Account Templates,Setting Personal Properties,Active Directory,Add Personal Information About Users As Stored in Active Directory Use Personal Properties to Search Active Directory,Setting Account Properties,Use 01 Properties,Remote control,Terminal Services Profile,Member Of,Dial-in,Environment,Sessions,General,Address,Account,Profile,Telephones,Organization,nwtraders.msft,User01,User logon name:,User logon name (pre-Windows 2000):,NWTRADERS,Account is locked out,Logon Hours,Student01,Log On To,Account options:,User must change password at next logon,User cannot change password,Password never expires,Store password using reversible encryption,Account expires:,Never,End of:,Wednesday, November 24, 1999,OK,Cancel,Apply,Specifying Logon Options,Copying Domain User Accounts,Creating User Account Templates,Set Up a User Account as a Template Account Create a User Account by Coping the Template Account,Customizing User Settings with User Profiles,User Profile Types Creating Roaming and Mandatory Roaming User Profiles,User Profile Types,Default User Profile Serves as the bases for all user profiles Local User Profile Created the First Time a User Logs on to a Computer Stored on a Computers Local Hard Disk,User Profile,Roaming User Profile Created by the System Administrator Stored on a server Mandatory User Profile Created by the System Administrator Stored on a server,Profile,Windows 2000 Client,Windows 2000 Client,Windows 2000 Client,Profile Server,Creating Roaming and Mandatory Roaming User Profiles,Create a Roaming User Profile,Create a Shared Folder on the Server,Set Up a Configured Roaming User Profile,Specify the Shared Folder in Path Information,Create a Mandatory User Profile,Create a Shared Folder on the Server with a User Profile Folder Inside,Rename Ntuser.dat to Ntuser.man,Best Practices,