1. Ch 9 Managing Active Directory User Accounts

2. Objectives Create Organizational Unit Creating User Accounts in Active Directory Disabling, Enabling, and Renaming Accounts Moving an Account Reset Password Delete Account

3. Active Directory users Accounts when you promote the server to a domain controller, it doesn’t preserve any of the users created for a workgroup You must enter the users again by using a different console because the users now appear in the Active Directory database

4. Hands-On Microsoft Windows Server 2008 - edited by Nada Almohaimeed 4 User Account Management Default accounts: –Administrator and Guest Accounts can be set up in two general environments: –Accounts that are set up through a stand-alone server that does not have Active Directory installed (workgroup) –Accounts that are set up in a domain when Active Directory is installed

5. Create an Organizational Unit 1. Click Start, point to Administrative Tools, and click Active Directory Users and Computers. 2. Right-click the top domain in the tree in the left pane, such as jpcomp.com, point to New,and click Organizational Unit. 3. Enter SalesOU and your initials, such as SalesOUJP. Click OK. 4. Click the plus sign in front of the domain in the left pane so that you can see the OU you created listed under the domain. 5. Right-click the OU, such as SalesOUJP. What options are available on the shortcut menu? 6. Click Delegate Control. 5

6. Create an Organizational Unit 7. Click Next when the Delegation of Control Wizard starts. 8. Click Add. 9. Click the Advanced button. 10. Click Find Now. 11. Because you have not yet defined user accounts, click Administrator for this activity. Notice that names with a single head icon represent accounts and names with a double head icon represent groups of accounts. Click OK. 12. Click OK in the Select Users, Computers, or Groups dialog box. 13. Click Next in the Delegation of Control Wizard. 14. Click the box for Create, delete, and manage user accounts 15. Click Next. 16. Review the tasks that you have completed and then click Finish. 17. Close the Active Directory Users and Computers window. 6

7. Creating User Accounts in Active Directory 1. Click Start, click Run, type mmc, and click OK. Maximize the console windows, if necessary. Click the File menu and click Add/Remove Snap-in. Under the Available snap-ins, click Active Directory Users and Computers and click Add. Click OK. 2. In the left pane, click the plus sign in front of Active Directory Users and Computers, if necessary, to display the elements under it. Click the plus sign in front of the domain name, such as jpcomp.com, to display the folders and OUs under it. 3. Click the Users folder in the left pane. Are any accounts already created? What groups are shown along with the accounts? 4. Click the Action menu or right-click Users in the left pane, point to New, and click User. 7

8. Creating User Accounts in Active Directory 5. Type your first name in the First name box, type your middle initial (no period), and type your last name with the word ‘‘Test’’ appended to it in the Last name box (for example, RyanTest). Enter your initials with Test appended to them in the User logon name box (for example, JRTest) What options are automatically completed for you? 6. Click Next. 7. Enter a password and enter the password confirmation. Ensure the box is checked for User must change password at next logon. This option forces users to enter a new password the first time they log on, so that the account creator will not know their password. 8. Click Next. 9. Verify the information you have entered and click Finish. 10. To continue configuring the account, in the right pane, double-click the account you just created, such as RyanTest (alternatively, you can right-click the account and click Properties). 8

9. Creating User Accounts in Active Directory 11. Notice the tabs that are displayed for the account properties. 12. Click the General tab, if it is not already displayed, and enter a description of the account, such as Test account. 13. Click the Account tab to view the information you can enter on it. 14. Click the tabs you have not yet viewed to find out what information can be configured through each one. 15. Click OK. 16. Leave the Active Directory Users and Computers window open for the next activity. 9

10. Disabling, Enabling, and Renaming Accounts 1. Access the Active Directory Users and Computers window, or if it is closed, open it. 2. Browse to find the account, such as the one for Jason B. RyanTest, you created in the previous Activity under the Users folder within the domain that you created. 3. Right-click the account and click Disable Account on the shortcut menu 4. Click OK when you see the informational dialog box that verifies you have disabled the account. The account icon will have a down arrow inside a white circle to show that it is disabled. No one can use the account until you enable it. 5. To rename the account, right-click it and click Rename. Enter a new name, such as Martin Sanchez, and then press Enter. 10

11. Disabling, Enabling, and Renaming Accounts 6. When you see the Rename User dialog box, change the First name and the Last name boxes to reflect the new name. Change the User logon name, such as to MSTest. Click OK. 7. Make sure the account is now listed as Martin Sanchez in the Users folder. 8. Right-click the account you renamed and click Enable Account. Click OK. What happens to the display of the account in the Users folder? 9. Leave the Active Directory Users and Computers window open for the next activity. 11

12. Moving an Account 1. Access the Active Directory Users and Computers window, or if it is closed, open it. 2. Right-click the account you renamed, such as Martin Sanchez. 3. Click Move 4. Find an OU and click it 5. In the tree of the left pane, double-click the OU to which you moved the account and verify that it is moved. 12

13. Resetting a Password 1. Access the Active Directory Users and Computers window, or open it if it is closed. 3. Right-click the account for which you want to reset the password, such as Martin Sanchez. 4. Click Reset Password 5. Enter the new password and then confirm it. 6. Ensure that the box is checked for User must change password at next logon, Checking this box enables you to force the user to change the password you set, so that you will not know the new password, which is a best practice endorsed by Microsoft and often a requirement of financial auditors who scrutinize networks that handle financial information. 7. Click OK in the Reset Password dialog box. Click OK in the information message box. 13

14. Deleting an Account 1.Access the Active Directory Users and Computers window, or open it if it is closed. 2.Right-click the account you want to delete, such as Martin Sanchez, and click Delete 3.Click Yes to verify that you want to delete this account 4.Close the Active Directory Users and Computers window. Click Yes when asked to save the console settings, enter a name for the console (such as Manage Accounts) if you haven’t previously, and click Save. 14