- Understanding Security Groups
- User Account Control: Smarter User Privileges
- Creating and Managing User Accounts
- Working with the User Accounts Dialog Box
- Working with the Local Users and Groups Snap-In
- Setting Account Policies
- Working with Users and Groups from the Command Line
- Creating and Enforcing Bulletproof Passwords
- Sharing Files with Other Users
- Using Parental Controls to Restrict Computer Usage
- Sharing Your Computer Securely
- From Here
Working with the Local Users and Groups Snap-In
The most powerful of the Windows Vista tools for working with users is the Local Users and Groups MMC snap-in. To load this snap-in, Vista offers three methods:
- In the User Accounts dialog box (refer to the previous section), display the Advanced tab and then click the Advanced button.
- Press Windows Logo+R (or select Start, All Programs, Accessories, Run) type lusrmgr.msc, and click OK.
- Select Start, right-click Computer, and then click Manage. In the Computer Management window, select System Tools, Local Users and Groups.
Whichever method you use, enter your credentials and then select the Users branch to see a list of the users on your system, as shown in Figure 6.6.
Figure 6.6 The Users branch lists all the system's users and enables you to add, modify, and delete users.
From here, you can perform the following tasks:
- Add a new user—Make sure that no user is selected and then select Action, New User. In the New User dialog box, type the User Name, Password, and Confirm Password. (I discuss the password-related check boxes in this dialog box later in this chapter; see "User Account Password Options.") Click Create.
- Change a user's name—Right-click the user and then click Rename.
- Change a user's password—Right-click the user and then click Set Password.
- Add a user to a group—Double-click the user to open the user's property sheet. In the Member Of tab, click Add and use the Enter the Object Names to Select box to enter the group name. If you're not sure of the name, click Advanced to open the Select Groups dialog box, click Find Now to list all the groups, select the group, and then click OK. Click OK to close the property sheet.
- Remove a user from a group—Double-click the user to open the user's property sheet. In the Member Of tab, select the group from which you want the user removed, and then click Remove. Click OK to close the property sheet.
- Change a user's profile—Double-click the user to open the user's property sheet. Use the Profile tab to change the profile path, logon script, and home folder (activate the Local Path option to specify a local folder; or activate Connect to specify a shared network folder).
- Disable an account—Double-click the user to open the user's property sheet. In the General tab, activate the Account Is Disabled check box.
- Delete a user—Right-click the user and then click Delete. When Vista asks you to confirm, click Yes.