Chapter 7 Server Management Policies –User accounts –Groups Rights and permissions Examples

User Account Policies Password expiration Password length Password history (NT memorization) Unsuccessful logon attempts and account lockout User home directories

Group (Account) Policies Local groups (accounts) in a domain Global groups (accounts) across domains –Domain administrators –Domain users –Domain guests Global groups belong to local group

Rights and Permissions to Group Rights –Perform tasks in the domain –Only Administrator has the right to grant right Permissions –Access files and/or directories

Rights - I Users –Access computer from network Administrator, operator –Add workstation to domain –Back up files and directories –Change the system time –Force shutdown from a remote system –Load and unload device drivers

Rights - II Administrator, operator –Manage auditing and security log –Restore files and directories –Shutdown the system –Take ownership of files or other objects –Log on locally (to a server)

Assignment Review chapters 1-7 Read chapter 8

Example - Setting Account Policies Start Program Administration Tools User Manager for Domains Policies Account Set –Maximum Password Age (never expire) –Minimum Password Age –Allow Change Immediately –Minimum Password Length (5 characters) –Password Uniqueness (2) –Account Lockout (3)

Example - Creating Accounts - I Start Program Administrative Tools User Manager for Domains User New User Set –User name –Full name –Description (job title) –Password

Example - Creating Accounts - II Group button Administrators group Add OK Profile button Connect (enter H) To (\USERS\your last name) OK

Example - Creating Accounts - III Hours button Allow or Disallow (after mark the hours) OK Logon To button (limit location of logon) OK Account button Account Expires Account Type OK

Example - Creating Accounts - IV Dialing button (control remote access) OK Add

Example - Creating Accounts - I New Account Setup Wizard Start Program Administrative Tools Administrative Wizards Add User Accounts

Example - Creating Groups - I Start Program Administrative Tools User Manager for Domains User New Global group Enter –Group name –Description Highlight member’s name Add OK

Example - Creating Groups - I Group Management Setup Wizard Start Program Administrative Tools Group Management Create a New Group and Add Members

Example - Rights Start Program Administrative Tools User Manager for Domains Policies Highlight (user name) User Rights Highlight (right) Add Highlight (group) Add OK