User Administration Concepts and Mechanisms

Study Notes

Most users have read-only access, unable to edit or configure documents; system administrators have full access and control over administrative tasks.
Key functions of administrators include creating monitor groups, managing users, and changing user preferences.
The distinction between standard users and administrators is in the level of access to system configurations and core areas.

UAC allows standard users to perform tasks as non-administrators without switching accounts or logging off.
Accounts in the local Administrators group run most applications with standard user privileges to improve security.

Active Directory authentication facilitates user management by allowing the import of users from the domain for access to applications.

User accounts are required for network access, determining login times, workgroup/domain locations, and assigned privilege levels.

Local Accounts:
- Created on a specific machine, authenticating local access only.
- Suitable for individual standalone systems or member servers, with access restricted to the local machine.
Domain Accounts:
- Managed through a domain controller, providing centralized control and user management across a network.
- Supports roaming profiles, allowing user data to move with them across different machines.

Roaming profiles ensure user settings and data are available on any networked computer.
Changes are copied from a cached local version back to the server upon user logout.
Benefits include consistent access to user settings across devices and simplified backup processes.

Home folders collect user files in a centralized location, available as a network drive that can be easily backed up.

Automation enhances efficiency by performing routine tasks independently, reducing the need for human intervention.
Scripting and scheduling tools can automate diverse tasks such as software installations, file management, and system notifications.

Password policies can only be changed by network administrators in a domain environment to enhance security.
Key components of password policy include:
- Enforce Password History: Prevents reuse of recent passwords, configurable to remember a specified number of past passwords.
- Maximum Password Age: Sets limits on how long a password remains valid before requiring a change; default is 42 days.
- Minimum Password Age: Ensures users keep a password for a specified duration before changing it, usually set between three to seven days to prevent immediate reversion to an old password.