Windows User Account Management Quiz

Managing User Accounts in Windows

Local User Accounts

• A local user account is stored in the Windows system's Security Accounts Manager (SAM) database.

Local vs Microsoft Accounts

• The primary difference between a local account and a Microsoft account is that a local account is stored on the local machine, while a Microsoft account is a cloud-based account that allows synchronization across devices.

Profile Settings Synchronization

• Profile settings are synchronized between devices in Windows using a Microsoft account.

Security Groups

• The primary purpose of using security groups in Windows is to simplify user and permission management.

Custom Groups with Least Privilege Permissions

• Setting up custom groups with least privilege permissions ensures that users have only the necessary permissions to perform their tasks, reducing the risk of security breaches.

Default Status of Administrator Account

• The default status of the 'Administrator' user account in Windows is disabled.

Guest Group

• The main purpose of the Guest group in Windows is to provide a limited-access account for temporary users.

Power Users Group

• The Power Users group in Windows 10/11 is a legacy group that provides a range of permissions, but is not recommended for use due to security risks.

Users Group

• A user account in the Users group can typically perform tasks such as running applications, accessing files, and customizing their desktop.

Setting Up Additional User Accounts

• The recommended approach for setting up additional user accounts in Windows is to create a standard user account and allocate necessary permissions and access.

Local Users and Groups Management Console

• The Local Users and Groups management console in Windows can be used to create, manage, and delete user accounts, as well as manage group memberships and permissions.

Creating a New User Account with Password Requirement

• A new user account can be added with a requirement to choose a new password at first login using the command line by running the command net user * /add /expires:never /passwordreq:yes.