CreatingandManagingUserAccounts创建和管理用户账号PPT学习教案

1、会计学1CreatingandManagingUserAccounts创建和管理用户账号创建和管理用户账号nCustomizing User Settings with User ProfilesnBest Practices第1页/共24页nEnable users to log on to the domain to gain access to network resourcesnReside in Active DirectorynEnable users to log on and access resources on a specific computernReside in S

2、AMnEnable users to perform administrative tasks or gain temporary access to network resources nReside in SAM (local built-in user accounts)nReside in Active Directory (domain built-in user accounts)Administrator and Guest第2页/共24页第3页/共24页第4页/共24页第5页/共24页第6页/共24页nCreated on Computers Running Windows 2

3、000 Professional nCreated on Stand-alone or Member Servers Running Windows 2000 Server or Windows 2000 Advanced ServernReside in SAMNew UserUser name:JYoungFull name:Description:Jonathan Young Password:*Confirm:*User must change password at next logonUser cannot change passwordPassword never expires

4、Account is disabledCloseCreateLocal User Accounts Are:第7页/共24页第8页/共24页Setup optionsSelect the action you want the Setup Wizard to perform.Uninstall the Administrative ToolsClick an option and then click Next.Install all of the Administrative ToolsDescriptionInstall / Reinstall all components of the

5、Windows 2000Administration Tools.Windows 2000 Administration Tools Setup Wizard BackActive Directory Domains and TrustsActive Directory Sites and ServicesActive Directory Users and ComputersComponent ServicesComponent ManagementConfigure your SeverData Sources (ODBC)DHCPDistributed File SystemDNSDom

6、ain Controller Security PolicyDomain Security PolicyEvent ViewerInternet Services ManagerLicensingLocal Security PolicyPerformanceRouting and Remote AccessServer Extensions AdministratorServicesTelnet Server AdministrationnThe tools appear on the Administrative Tools menunAfter you install Administr

7、ation Tools, use the runas command to run the tools 第9页/共24页ConsoleActive Directory Users and ComputersWindow HelpActionViewTreeNameTypeDescriptionUsers 20 objectsActive Directory Users and Compnwtraders.msftBuiltinComputersDomain ControllersForeignSecurityPrincipalsLostAndFoundSystemUsersAdministra

8、torCert PublishersDNSAdminsDNSUpdateProxyDomain AdminsDomain ComputersDomain ControllersDomain GuestsUserSecurity Group - GlobalSecurity Group - Domain LocalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalBuilt-in accountEnterprise c

9、ertiDNS clients whoDesignated admAll workstationsAll domain contAll domain guesDNS AdministraFindNewAll TasksViewNew Window from HereRefreshExport ListPropertiesHelpComputerContactGroupPrinterShared FolderUserCreate in: nwtraders.msft/UsersFirst name:Last name:Full name:JudyLewJudy A. LewInitials: A

10、User logon name:judy1nwtraders.msftUser logon name (pre-Windows 2000):NWTRADERSjudy1CancelDelegate ControlNew Object - User第10页/共24页New Object - UserPassword:Confirm Password:CancelUser must change password at next logonUser cannot change passwordPassword never expiresAccount is disabled*第11页/共24页Ho

11、meUser1User2User3第12页/共24页nSetting Personal PropertiesnSetting Account PropertiesnSpecifying Logon OptionsnCopying Domain User Accounts nCreating User Account Templates第13页/共24页Active DirectoryStudent 01 PropertiesRemote controlUser01Terminal Services ProfileMember OfDial-inEnvironmentSessionsGenera

12、lAddressAccountProfileTelephonesOrganization第14页/共24页 User02 UserUser03UserUser04UserUser05UserUser06User User01UserUse 01 PropertiesRemote controlTerminal Services ProfileMember OfDial-inEnvironmentSessionsGeneralAddressAccountProfileTelephones OrganizationUser01User logon name:User logon name (pre

13、-Windows 2000):NWTRADERSAccount is locked outLogon HoursStudent01Log On To Account options:User must change password at next logonUser cannot change passwordPassword never expiresStore password using reversible encryptionAccount expires:NeverEnd of:Wednesday, November 24, 1999OKCancelApplyCopyAdd me

14、mbers to a groupReset PasswordDisable AccountMoveOpen home pageSend mailSend mailDeleteRenameRefreshPropertiesHelp第15页/共24页Logon Hours for User01OKCancel12 12 12 2468 102468 10.Logon PermittedLogon DeniedAllSundayMondayTuesdayWednesdayThursdayFridaySaturdayLogon WorkstationsThis feature requires the

15、 NetBIOS protocol. In Computer name, type the pre-Windows 2000 computer name.This user can log on to:All computersThe following computersComputer name:BrisbanePerthOKCancelAddEditRemove第16页/共24页Copy an Existing Domain User Account to Simplify the Process of Creating a New Domain User Account.DomainU

16、serAccount(User1)DomainUserAccount(User2)Domain User2Domain User1第17页/共24页ConsoleActive Directory Users and ComputersWindow HelpActionViewTreeNameTypeDescriptionUsers 28 objectsActive Directory Users and Compunwtraders.msftBuiltinCasablancaComputersDenver OUDomain ControllersForeignSecurityPrincipal

17、sAdministratorCert PublishersDHCP AdministratorsDHCP UsersDnsAdminsDnsUpdateProxyDomain AdminsDomain Computersount fcertifio havo havstratowho UsersPortlandSeattleStudentOUTunisVancouver OUDomain ControllersDomain GuestsDomain UsersEnterprise AdminsGroup 01_Sales TemplateUserCopyAdd members to a gro

18、upEnable AccountReset PasswordMoveOpen home pageSend mailAll TasksDeleteRenameRefreshPropertiesHelpCreates a new user, copying information from the selected user. admiionsontrouestaseradmiCopy Object - UserCreate in: nwtraders.msft/UsersFirst name:Last name:Full name:salesuser1sales user1Initials:Us

19、er logon name:salesuser1nwtraders.msftUser logon name (pre-Windows 2000):NWTRADERSsalesuser1Cancel第18页/共24页第19页/共24页UserProfileDisplayRegionalSettingsMouseSoundsModifySavenRoaming User ProfilelCreated by the System AdministratorlStored on a server nMandatory User ProfilelCreated by the System AdministratorlStored on a server ProfileWindows 2000ClientWindows 2000ClientWindows 2000Client