MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

7-58 Chapter 7 Setting Up and Managing User Accounts
2. If you really mean to delete the user account, what is often a better way to handle
the situation than simply deleting the user account?
It is usually better to disable the account instead of deleting it. When an account is disabled,
no user can log on by using it. If the account is needed again, you can re-enable it, and all rights
and permissions are retained. When you are sure that you no longer need a disabled account,
you can then delete it.
3. To prevent a situation like the one that happened with Raymond (in which rights and
permissions to resources were assigned directly to Martin’s user account and were
thus difficult to reconstruct), what is a better way to assign rights and permissions?
You should assign rights and permissions to local groups rather than directly to local user
accounts. You should then make the user accounts members of the appropriate groups. This
way, if a user account is accidentally deleted, you can create a new user account and place it
in the appropriate groups again, rather than having to reconstruct rights and permissions on
the user account. Using groups also helps to manage rights and permissions better in other situations,
such as when a user no longer needs access to particular resources or when a new
user joins the company.
4. Soon after creating a new user account for Martin, Raymond contacts you and tells
you that Martin has forgotten his new password. Can you reset his password?
How?
Yes. You must log on to Martin’s computer and use the Computer Management snap-in (or use
the Computer Management snap-in remotely) to reset the password. You should also configure
Martin’s user account so that he must change the password the next time he logs on, so that
the password is known only to him.
5. What should you tell Martin to do so that he can recover his own password should
this happen again?
You should show Martin how to create a password reset disk.