1、會計學(xué)1CreatingandManagingUserAccounts創(chuàng)建和管理用戶賬號創(chuàng)建和管理用戶賬號nCustomizing User Settings with User ProfilesnBest Practices第1頁/共24頁nEnable users to log on to the domain to gain access to network resourcesnReside in Active DirectorynEnable users to log on and access resources on a specific computernReside in S

2、AMnEnable users to perform administrative tasks or gain temporary access to network resources nReside in SAM (local built-in user accounts)nReside in Active Directory (domain built-in user accounts)Administrator and Guest第2頁/共24頁第3頁/共24頁第4頁/共24頁第5頁/共24頁第6頁/共24頁nCreated on Computers Running Windows 2

3、000 Professional nCreated on Stand-alone or Member Servers Running Windows 2000 Server or Windows 2000 Advanced ServernReside in SAMNew UserUser name:JYoungFull name:Description:Jonathan Young Password:*Confirm:*User must change password at next logonUser cannot change passwordPassword never expires

4、Account is disabledCloseCreateLocal User Accounts Are:第7頁/共24頁第8頁/共24頁Setup optionsSelect the action you want the Setup Wizard to perform.Uninstall the Administrative ToolsClick an option and then click Next.Install all of the Administrative ToolsDescriptionInstall / Reinstall all components of the

5、Windows 2000Administration Tools.Windows 2000 Administration Tools Setup Wizard BackActive Directory Domains and TrustsActive Directory Sites and ServicesActive Directory Users and ComputersComponent ServicesComponent ManagementConfigure your SeverData Sources (ODBC)DHCPDistributed File SystemDNSDom

6、ain Controller Security PolicyDomain Security PolicyEvent ViewerInternet Services ManagerLicensingLocal Security PolicyPerformanceRouting and Remote AccessServer Extensions AdministratorServicesTelnet Server AdministrationnThe tools appear on the Administrative Tools menunAfter you install Administr

7、ation Tools, use the runas command to run the tools 第9頁/共24頁ConsoleActive Directory Users and ComputersWindow HelpActionViewTreeNameTypeDescriptionUsers 20 objectsActive Directory Users and Compnwtraders.msftBuiltinComputersDomain ControllersForeignSecurityPrincipalsLostAndFoundSystemUsersAdministra

8、torCert PublishersDNSAdminsDNSUpdateProxyDomain AdminsDomain ComputersDomain ControllersDomain GuestsUserSecurity Group - GlobalSecurity Group - Domain LocalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalSecurity Group - GlobalBuilt-in accountEnterprise c

9、ertiDNS clients whoDesignated admAll workstationsAll domain contAll domain guesDNS AdministraFindNewAll TasksViewNew Window from HereRefreshExport ListPropertiesHelpComputerContactGroupPrinterShared FolderUserCreate in: nwtraders.msft/UsersFirst name:Last name:Full name:JudyLewJudy A. LewInitials: A

10、User logon name:judy1nwtraders.msftUser logon name (pre-Windows 2000):NWTRADERSjudy1CancelDelegate ControlNew Object - User第10頁/共24頁New Object - UserPassword:Confirm Password:CancelUser must change password at next logonUser cannot change passwordPassword never expiresAccount is disabled*第11頁/共24頁Ho

11、meUser1User2User3第12頁/共24頁nSetting Personal PropertiesnSetting Account PropertiesnSpecifying Logon OptionsnCopying Domain User Accounts nCreating User Account Templates第13頁/共24頁Active DirectoryStudent 01 PropertiesRemote controlUser01Terminal Services ProfileMember OfDial-inEnvironmentSessionsGenera

12、lAddressAccountProfileTelephonesOrganization第14頁/共24頁 User02 UserUser03UserUser04UserUser05UserUser06User User01UserUse 01 PropertiesRemote controlTerminal Services ProfileMember OfDial-inEnvironmentSessionsGeneralAddressAccountProfileTelephones OrganizationUser01User logon name:User logon name (pre

13、-Windows 2000):NWTRADERSAccount is locked outLogon HoursStudent01Log On To Account options:User must change password at next logonUser cannot change passwordPassword never expiresStore password using reversible encryptionAccount expires:NeverEnd of:Wednesday, November 24, 1999OKCancelApplyCopyAdd me

14、mbers to a groupReset PasswordDisable AccountMoveOpen home pageSend mailSend mailDeleteRenameRefreshPropertiesHelp第15頁/共24頁Logon Hours for User01OKCancel12 12 12 2468 102468 10.Logon PermittedLogon DeniedAllSundayMondayTuesdayWednesdayThursdayFridaySaturdayLogon WorkstationsThis feature requires the

15、 NetBIOS protocol. In Computer name, type the pre-Windows 2000 computer name.This user can log on to:All computersThe following computersComputer name:BrisbanePerthOKCancelAddEditRemove第16頁/共24頁Copy an Existing Domain User Account to Simplify the Process of Creating a New Domain User Account.DomainU

16、serAccount(User1)DomainUserAccount(User2)Domain User2Domain User1第17頁/共24頁ConsoleActive Directory Users and ComputersWindow HelpActionViewTreeNameTypeDescriptionUsers 28 objectsActive Directory Users and Compunwtraders.msftBuiltinCasablancaComputersDenver OUDomain ControllersForeignSecurityPrincipal

17、sAdministratorCert PublishersDHCP AdministratorsDHCP UsersDnsAdminsDnsUpdateProxyDomain AdminsDomain Computersount fcertifio havo havstratowho UsersPortlandSeattleStudentOUTunisVancouver OUDomain ControllersDomain GuestsDomain UsersEnterprise AdminsGroup 01_Sales TemplateUserCopyAdd members to a gro

18、upEnable AccountReset PasswordMoveOpen home pageSend mailAll TasksDeleteRenameRefreshPropertiesHelpCreates a new user, copying information from the selected user. admiionsontrouestaseradmiCopy Object - UserCreate in: nwtraders.msft/UsersFirst name:Last name:Full name:salesuser1sales user1Initials:Us

19、er logon name:salesuser1nwtraders.msftUser logon name (pre-Windows 2000):NWTRADERSsalesuser1Cancel第18頁/共24頁第19頁/共24頁UserProfileDisplayRegionalSettingsMouseSoundsModifySavenRoaming User ProfilelCreated by the System AdministratorlStored on a server nMandatory User ProfilelCreated by the System AdministratorlStored on a server ProfileWindows 2000ClientWindows 2000ClientWindows 2000Client