USER MANAGEMENT

type of user : -1 local user :

it user created in local users and group I local system local user cannot creating in domain controller

2- domain user : it is user account created in active directory user and computer

(lab)how create local user :1- right click in client system or workgroup system select manage

2-expan local users and group

3- right click on user select new user

4- give any name eg ( user1 ) and description and password and click create

5- logon as user by selecting this computer after you log off * local user can logon only in the system where his account existing.

(lab)how To create domain user :1- start – program – administrative tools - active directory user and

computer

2- right click on user – new – user

3- type user name -first name – last name and logon name –click next

4- give the password – click next

5- click finish

6- after you click finish it show you this error massage

To fixed this error go to this steps 1- start – program – administrative tools - domain security policy

2-expan account policy – select password policy

3- right click on minimum password length –properties 4- in characters (7) change it to (0) –ok

6- and select password must meet complexity requirement right click – properties

7- select disabled –ok

8- start – run – type gpupdate –ok9- now you can create a user without password

How can domain user logon client or member server ? In client or member server :-1- press Alt + Control + delete 2- in user name type your user (u1) – ok

a domain user control :-how can administrator control a domain user Administrator can control a domain user by :1. Control password 2. Control which pc's in a domain, domain user can logon it .3. Control which time, domain user can logon in pc's in a domain.4. Control account of a domain user (expires date ) 5. control a user logon a domain controller

1. Control password :- While create a domain user, and in password window will find this option

a. user must change password at next logon (if it check mean user must change his password at next logon ,or password given by administrator will be fixed )

b. user cannot change password (user never change password )c. password never expires ( password never expires life time of

password 9999 days )

d. account is disable (enable or not )

2. Control which pc's in a domain, domain user can logon it:- By default domain user can logon any pc's(client in a domain)

After create a user (in active directory)Right click in a user

Select properties >select account

Select > logon to

Check > the following computers >give computer name (which computer need to allowed to this user)> add>ok>apply Check in client pc

3. Control which time, domain user can logon in pc's in a domain. By default domain user can logon any time

After create a user (in active directory )Right click in a user

Select properties

Select > logon hours

Give a time and check in client

4. Control account of a domain user (expires date ) By default domain user account not expires

After create a user (in active directory )Right click in a user

Select properties

Select > account expires Give a user expires date and check in client

5. Control a user logon a domain controller by give permission :- start – program – administrative tools – domain controller security policy

expand local policy – select user right assignment right click allow logon locally – select properties

select Add user or Group

type your user ( u1) and click check name – apply – ok

start – run – type gpupdate –ok

check in domain controller

How to create local user account use cmd :start – run – type –cmd –ok type c:\ net user /add username press enter

eg:

How to create domain user account use cmd :start – run – type –cmd –ok type c:\ net user /add username /domain press enter

eg:

Scrip:- It’s a batch file using for executed multi command by click How can create batch file Open text file put it Any command example (shutdown –s )Save as <name.bat>