MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Chapter Summary
7-49
■ Local user accounts allow users to log on at and access resources on only the computer
on which you create the local user account. Domain user accounts allow
users to log on to the domain and access resources anywhere on the network.
■ Local user account names must be unique on the computer on which you create
the account, and domain user accounts must be unique to the directory. Passwords
can be up to 128 characters long; a minimum of 8 characters is recommended.
Use a mixture of uppercase and lowercase letters, numerals, and valid
nonalphanumeric characters in creating passwords.
■ You can administer local user accounts using the following two tools:
❑ The User Accounts tool allows administrators to create a new user account,
change an existing account, and change the way a user logs on or logs off.
❑ The Computer Management snap-in allows you to create, modify, and delete
user accounts for the local computer on which you are working. If your computer
is part of a network, you can use the Computer Management snap-in on
a remote computer.
■ After creating a user account, you can modify the properties for the account by
using the Properties dialog box for the user account in Computer Management.
■ Groups simplify administration by allowing you to assign permissions and rights
to a group of users rather than to individual user accounts. Windows XP Professional
creates local groups in the local security database, so you can use local
groups only on the computer on which you create them.
Exam Highlights
Key Points
Exam Highlights
Before taking the exam, review the key points and terms that are presented in this
chapter. You need to know this information.
■ A domain does not recognize local user accounts, so do not create local user
accounts on computers running Windows XP Professional that are part of a
domain. Doing so restricts users from accessing resources in the domain and prevents
the domain administrator from administering the local user account properties
or assigning access permissions for domain resources.
■ Allow Guest access only in low-security workgroups, and always assign a password
to the Guest account. You can rename the Guest account, but you cannot
delete it.