ActiveDirectoryInUser AccountContains the user name, password, group, and personal information. The User Account Added to the domain will automatically get a SIDSecurityIdentifier, security identifier), this SID is unique in the domain. Even if the user account is deleted, its SID is retained. If a user account is deleted and a new account with the same name is added to the domain, the account will be assigned a new SID. In the ActiveDirectory domain, the user permission is determined by the unique SID.
After ActiveDirectory is successfully installed in WindowsServer2003, only users with valid accounts can log on to ActiveDirectory.
Operations to create and manage user accounts in ActiveDirectory must be performed in the domain controller DC.
To add a user account, follow these steps:
Step 2: Use the system Administrator, such as Administrator, to access the domain controller. Then, choose "Administrative Tools"> "ActiveDirectory users and computers" from the Start Menu, open the "ActiveDirectory users and computers" window.
TIPS:You can also enter the DSA. MSC command in the "run" dialog box and press the Enter key to open the "ActiveDirectory user and computer" window.
Step 2: double-click the domain name such as jinshouzhi.com.cn in the left pane, and select the Users container in the expanded Directory. In this case, you can view the existing user account in ActiveDirectory in the right pane. Select "operation"> "new"> "user" menu commands, as shown in 1.
Figure 1 select "user" menu command
Step 2: Open the "new-user" dialog box and enter the name of the user to be created, such as itchenchen, in the "user login name" edit box. This is the name used by the user to renew the domain from the workstation. Enter your personal information in the other edit box, and click "Next", as shown in figure 2.
Figure 2 "new-user" dialog box
Step 2: In the displayed "set password" dialog box, you can set the user's logon password. In the "password" and "Confirm Password" Edit boxes, enter the password again. In addition, select the "Change Password Upon next login" check box to force the user to change the password upon the first login to the AD domain; if the "user cannot change password" check box is selected, the user has no permission to change the account password. If the "Password Never Expires" check box is selected, the password is not subject to the password policy time limit; select the "account deactivated" check box to disable this user account. After completing the settings, click "Next"> "finish", as shown in 3.
Figure 3 Set User Password
TIPS:To ensure account security, the user login password should not be less than 6 Characters and must comply with the password policy. If the set password does not comply with the password policy, an error message is displayed, as shown in figure 4.
Figure 4 Prompt that the password does not comply with the password policy
Step 2: Repeat the preceding steps to add multiple Users to the Users container.
Summary:
Create and manage user accounts in ActiveDirectory so that users with valid accounts can log on to ActiveDirectory, which facilitates unified management by the system administrator. It is hoped that the method of creating and managing user accounts in ActiveDirectory described in this article will be helpful to readers. More information about ActiveDirectory remains to be explored and learned by readers.