Giáo trình ACNA - Chap06 doc

1 WORKING WITH USER ACCOUNTS Chapter 6 Chapter 6: WORKING WITH USER ACCOUNTS 2 CHAPTER OVERVIEW • Understand the differences between local user and domain user accounts. • Plan, create, and manage local and domain user accounts. • Create and manage user accounts by using templates, importation, and command-line tools. • Manage user profiles. • Understand the purpose and function of profiles. • Troubleshoot user authentication issues. Chapter 6: WORKING WITH USER ACCOUNTS 3 UNDERSTANDING USER ACCOUNTS • Local user accounts stored in the Security Accounts Manager (SAM) database on that system • Can be used only on that system • Domain user accounts • Stored in Active Directory on domain controllers • Can be used on any system in Active Directory Chapter 6: WORKING WITH USER ACCOUNTS 4 WORKGROUPS • No centralized database of user accounts • User account must exist in the SAM of each system the user accesses • Impractical in environments with more than 10 users Chapter 6: WORKING WITH USER ACCOUNTS 5 DOMAINS Chapter 6: WORKING WITH USER ACCOUNTS 6 PLANNING USER ACCOUNTS OVERVIEW • Account naming • Choosing passwords • Designing an Active Directory hierarchy Chapter 6: WORKING WITH USER ACCOUNTS 7 ACCOUNT NAMING • Account names can be up to 256 characters • Account names authentication credential can be between 1 and 20 characters (letters and/or numbers). • For names longer than 20 characters the first 20 must be unique. • Account names are not case sensitive. • The following characters cannot be used in the account name: • " / \ [ ] : ; | , + = * ? < > @ Chapter 6: WORKING WITH USER ACCOUNTS 8 STRONG PASSWORDS • Cannot be easily guessed or broken by a password cracking program. • Use password policy: • Enforce strong password (PASSFILT.DLL) • Must be six characters long • At least three (3) of the following four (4) classes: • Upper case • Lower case • Westernized Arabic numeral (0 – 9) • Special characters • Cannot contain user name or any part of full name • Example: Up2Lower5 Chapter 6: WORKING WITH USER ACCOUNTS 9 ACCOUNT PASSWORD POLICY Chapter 6: WORKING WITH USER ACCOUNTS 10 DESIGNING AN ACTIVE DIRECTORY HIERARCHY • Create an organizational unit (OU) structure • Place users in appropriate OU • Provides for features such as group policy [...]... EXCHANGE • Useful for creating large numbers of users at a time • Step 1: • Create a comma-separated value (CSV) text file of user information • Step 2: • Use Csvde.exe to import the user information from the CSV file into Active Directory Chapter 6: WORKING WITH USER ACCOUNTS35 CREATING USER OBJECTS WITH DSADD.EXE • Command-line utility • Can be used in batch files or scripts • Can be used to add other objects... USER ACCOUNTS25 THE ENVIRONMENT TAB Chapter 6: WORKING WITH USER ACCOUNTS26 THE REMOTE CONTROL TAB Chapter 6: WORKING WITH USER ACCOUNTS27 THE SESSIONS TAB Chapter 6: WORKING WITH USER ACCOUNTS28 THE DIAL-IN TAB Chapter 6: WORKING WITH USER ACCOUNTS29 THE COM+ TAB Chapter 6: WORKING WITH USER ACCOUNTS30 MANAGING MULTIPLE USERS Chapter 6: WORKING WITH USER ACCOUNTS31 MOVING USER OBJECTS Chapter 6: WORKING... 6: WORKING WITH USER ACCOUNTS16 MANAGING DOMAIN USER ACCOUNTS • From the Action menu, you can: • • • • Reset a user account password Rename, disable, and delete an account Modify group membership Send e-mail and open a user’s homepage Chapter 6: WORKING WITH USER ACCOUNTS17 THE GENERAL TAB Chapter 6: WORKING WITH USER ACCOUNTS18 THE ADDRESS TAB Chapter 6: WORKING WITH USER ACCOUNTS19 THE TELEPHONES... Command-line utility • Can be used in batch files or scripts • Can be used to add other objects as well as users Chapter 6: WORKING WITH USER ACCOUNTS36 MODIFYING USER OBJECTS WITH DSMOD.EXE • Command-line utility • Can be used in batch files or scripts • Can be used only to modify existing objects . user accounts. • Create and manage user accounts by using templates, importation, and command-line tools. • Manage user profiles. • Understand the purpose and function of profiles. • Troubleshoot. account password. • Rename, disable, and delete an account. • Modify group membership. • Send e-mail and open a user’s homepage. Chapter 6: WORKING WITH USER ACCOUNTS 17 THE GENERAL TAB Chapter