Windows NT

Home
Support Menu


Last Updated On: 08/05/2004
   

Windows NT Navigation

User Manager

Default Accounts

There are two user accounts created by default: the Administrator account and Guest account. The Administrator account manages configuration and can be used to manage security policies, creating or changing users and groups, setting shared directories for networking, and for other Hardware maintenance tasks. The Guest account allows users with little or no security access to use the computer. None of the user preferences or configuration changes that the guest makes are saved. The Guest account is disabled by default.

New User Accounts

There are two ways to add a user account, you can create new user accounts or copy an existing account. User accounts are administered with the User Manager in Administrative Tools. Use the following procedures to create a new user account and copy an existing user account.

Creating User Accounts

  1. Log on to NT as Administrator.
  2. Click on Start » Programs » Administrative Tools » User Manager.
  3. Select User » New User.
  4. Type the User ID in the Username field.
  5. Type the user’s name in the Full Name field.
  6. Type a description of the User in the Description field.
  7. Type a password for the User in the Password field.
  8. Type the same password in the confirm password.
  9. Select the check boxes of the options you need.
  10. Click OK.

Copying User Accounts

  1. Select the new user account that you created in the User Manager.
  2. Select User, then Copy.
  3. Enter the user information into the appropriate fields.
  4. Click OK.

Groups

NT creates six groups at installation. You can modify these default groups and add your own These built-in groups are:

Group
Purpose
Administrators Administrators have full rights and privileges over all files and other resources on the workstation. If the workstation is part of a network domain, then all domain administrators are members to the Administrators group automatically.
Power Users Power Users can add Program Manager groups, share directories, and modify the system clock. They can also install, delete, share and manage printers. Additionally they can create users and groups. Finally they can manage and delete any users and groups they created.
Users The Users can run applications, manage files on the workstation, and use local and network printers. They can create and manage their own profile.
Guests The Guest group provides limited access of basic workstation resources.
Backup Operators Backup Operators can use the Backup and Restore commands provided with NT. They have full access to all the files, but only while using backup and restore commands.
Replicator The Replicator group is used to set up the Replicator service, which automatically updates files from one workstation to another.

Assigning User Accounts to Groups

  1. Log on to NT as Administrator.
  2. Click on Start» Programs » Administrative Tools » User Manager.
  3. Double-click on a User.
  4. Click the Group button in the User Properties Box
  5. Select the group you would like the User to be a member of.
  6. Click Add.
  7. Click OK to close Group Membership then OK to Close User Properties.

Creating Groups

  1. Select New Local Group from the User menu.
  2. Enter the group name in the Group Name field.
  3. Enter the description in the Description field.
  4. Click Add to select the members to add to the group.
  5. Click OK when finished.

User Rights

User rights allow users to perform certain tasks on the workstation. User rights apply to the entire computer, unlike permissions. User rights allow a user to:.

Right
Group
Access this computer from network Administrators, Everyone, Power Users
Backup files and directories Administrators, Backup Operators
Change system time Administrators, Power Users
Force shutdown from remote system Administrators, Power Users
Load and unload device drivers Administrators
Log on locally Administrators, Backup Operators, Power Users, Everyone, Guests, Users
Manage and audit security log Administrators
Restore file and directories Administrators, Backup Operators
Shut down the system Administrators, Backup Operators, Everyone, Power Users, Users
Take ownership of files and other objects Administrators, Backup Operators, Everyone, Power Users, Users

Granting User Rights to a Group

  1. Log on to NT as administrator.
  2. Click on Start» Programs » Administrative Tools » User Manager.
  3. Select Policies» User Rights.
  4. Select the User Right from the Right drop-down list.
  5. Click add to grant the selected right to a user or group (to grant the right to a user you must first click on Show Users in the Add Users and Groups dialog box).
  6. Select the group or user you want to grant rights then click on Add.
  7. Click OK.
  8. Click OK to return to User Manager.

Removing User Rights from a Group

  1. Log on to NT as administrator.
  2. Click on Start» Programs » Administrative Tools » User Manager.
  3. Select Policies» User Rights.
  4. Select the User Right from the Right drop-down list.
  5. Select the group or user you want to remove.
  6. Click Remove.
  7. Click OK to return to User Manager.

Audit Policy

You can keep a record of many operating system activities using Audit Policy. The action you want to track will be recorded in a log file.

Enable Auditing

  1. Log on to NT as administrator.
  2. Click on Start» Programs » Administrative Tools » User Manager.
  3. Select Policies» Audit.
  4. Enable Audit These Events.
  5. Select the activities you want to audit.
  6. Click OK.
  7. Exit the User Manager.

When these activities occur they will be written to the Security log, which can be read in the Event Viewer.