User Accounts, Groups, and Rights

Start -> Programs -> Administrative Tools -> User Manager or Start -> Control Panel -> Administrative Tools -> Computer Management->Local Users and Groups

• User Account Policies
• Password expiration (45-90 days)
• Password length (at least 8 characters: uppercase, lowercase, digits, special characters)
• Password history
• Account lockout (number of unsuccessful login attempts)
• User home directories - dedicated location on a file server or a workstation set up for specific account holders
• Group Policies

Local Group	Description
Account operators	can create, delete, & manage accounts on server or domain
Administrators	access to all server and administrative functions
Backup operators	can back up all files on a server or within a domain
Guests	limited access
Print operators	can manage designated print services
Replicator	for automating replication of files, such as databases
Server operators	allowed to manage specific server functions
Users	regular users
Domain Administrators	has administrative rights across domains
Domain Users	manage user access rights across multiple domains
Domain Guests	can manage guest accounts across multiple domains

---