In 80 days you must configure all users who require access to network resources with a user account
with this user account user can authenticate to the aid it is domain and accessed network resources
and vendor server 2016 a user account is an object that contains all the information that defines a
user a user account includes the user name user password and group memberships a user account also contains
many other settings that you can configure based on your organizational requirements with a user account.
You can allow or deny users permission to sign into a computer based on their user account identity.
You can grant user success to processes and services for a specific security context.
You can manage user of access to resources such as ADT as objects and their properties.
Shared folders files directories and renter use a user account enables a user to assign them to computers
and domains with an identity that the domain can authenticate.
When you create a user account you must provide to user a log on name which must be unique in the domain
and forest in which you create the user account to maximize security.
You should avoid multiple users share in a single account and instead ensure that each user who assigns
into the network has a unique user account and password.
Please note that our focus on ADT s account you can also store user accounts in the local security accounts
manager database or which COMPUTER Enable and local sign in and access to local resources local user
accounts are for the most part.
Beyond the scope of this course.
Now some words about creating user accounts a user account includes the user name and password which
serve as a users sign in credentials.
A user object also includes several other attributes that describe and manage as a user.
You can use Active Directory Users and Computers Management Council you can use Active Directory Administrative
Center Management Council and Windows power shell or the DIA's ad command line tool to create a user
object.
Now some words about considerations for naming users your naming convention is an important consideration.
Formalized naming convention will allow you to deal with duplicate user names and name changes in a
standardised way.
When you create user accounts.
Consider the following elements.
Full name.
Attribute this attribute is used to create several attributes of a user object mostly the common name
and display in name attributes the common name of a user is the name displayed in the details pane of
the snap in and it must be unique within the container or you.
You can create a user object for a person with the same name as an existing user in the same container
or over you.
You need to give the new user object a unique full name.
Now you can log on user principal name or European logos.
Follow the format user or log on name at sign and European suffix user names in Ada the S can contain
special characters including periods high fence and apostrophes.
These special characters enable you to generate accurate user names such as names with a post reverse
or dashes.
However certain programs and applications might have other restrictions.
Therefore it is recommended that you use only standard letters and numbers until you test the applications
in your enterprise environment for compatibility with special characters.
You can manage the list of available European suffixes by using the Active Directory domains and trusts
snap in right click the root of the snap in click properties and then use the European suffix a step
to add or remove suffixes.
The domain name system or DNS name of your HDD as domain is always available as a suffix and you cannot
remove it in a multi domain environment.
You can assign different European suffixes to users for purposes such as a male domain suffix.
Please know that it is important that you implement a use a recount naming strategy especially in large
networks in which users might have the same full name.
A combination of last name and first name and where necessary additional characters should yell to a
unique user account name specifically.
It is only the European name that must be unique within your aided forest.
The full name attribute needs to be unique only within the O you where it resides.
The user a same account name must be unique within that domain.