USER MANAGEMENT
type of user : -1 local user :
it user created in local users and group I local system local user cannot creating in domain controller
2- domain user : it is user account created in active directory user and computer
(lab)how create local user :1- right click in client system or workgroup system select manage
2-expan local users and group
3- right click on user select new user
4- give any name eg ( user1 ) and description and password and click create
5- logon as user by selecting this computer after you log off * local user can logon only in the system where his account existing.
(lab)how To create domain user :1- start – program – administrative tools - active directory user and
computer
2- right click on user – new – user
3- type user name -first name – last name and logon name –click next
4- give the password – click next
5- click finish
6- after you click finish it show you this error massage
To fixed this error go to this steps 1- start – program – administrative tools - domain security policy
3- right click on minimum password length –properties 4- in characters (7) change it to (0) –ok
6- and select password must meet complexity requirement right click – properties
7- select disabled –ok
8- start – run – type gpupdate –ok9- now you can create a user without password
How can domain user logon client or member server ? In client or member server :-1- press Alt + Control + delete 2- in user name type your user (u1) – ok
a domain user control :-how can administrator control a domain user Administrator can control a domain user by :1. Control password 2. Control which pc's in a domain, domain user can logon it .3. Control which time, domain user can logon in pc's in a domain.4. Control account of a domain user (expires date ) 5. control a user logon a domain controller
1. Control password :- While create a domain user, and in password window will find this option
a. user must change password at next logon (if it check mean user must change his password at next logon ,or password given by administrator will be fixed )
b. user cannot change password (user never change password )c. password never expires ( password never expires life time of
password 9999 days )
d. account is disable (enable or not )
2. Control which pc's in a domain, domain user can logon it:- By default domain user can logon any pc's(client in a domain)
After create a user (in active directory)Right click in a user
Select properties >select account
Select > logon to
Check > the following computers >give computer name (which computer need to allowed to this user)> add>ok>apply Check in client pc
3. Control which time, domain user can logon in pc's in a domain. By default domain user can logon any time
After create a user (in active directory )Right click in a user
Select properties
Select > logon hours
Give a time and check in client
4. Control account of a domain user (expires date ) By default domain user account not expires
After create a user (in active directory )Right click in a user
Select properties
Select > account expires Give a user expires date and check in client
5. Control a user logon a domain controller by give permission :- start – program – administrative tools – domain controller security policy
expand local policy – select user right assignment right click allow logon locally – select properties
select Add user or Group
type your user ( u1) and click check name – apply – ok
start – run – type gpupdate –ok
check in domain controller
How to create local user account use cmd :start – run – type –cmd –ok type c:\ net user /add username press enter
eg:
How to create domain user account use cmd :start – run – type –cmd –ok type c:\ net user /add username /domain press enter
eg:
Scrip:- It’s a batch file using for executed multi command by click How can create batch file Open text file put it Any command example (shutdown –s )Save as <name.bat>