Assigning User Rights on a Specific Computer in C#.NET

Create QR Code in C#.NET Assigning User Rights on a Specific Computer

User rights can also be applied to a specific computer. However, remember that domain and OU policy take precedence over local policy. This means that any settings in these policies will override settings you make on a local computer. You can apply user rights locally by completing the following steps:

1 Start Local Security Policy by clicking Start, Programs or All Programs, Administrative Tools, Local Security Policy. 2 Under Security Settings, expand Local Policies and then User Rights Assignment. 3 Double-click the user right you want to modify. The Properties dialog box shows current users and groups that have been given the user right. 4 You can apply the user right to additional users and groups by clicking Add User Or Group. This opens the Select Users Or Groups dialog box, which you can use to add users and groups. 5 Click OK twice to close the open dialog boxes.

If the options in the Properties dialog box are dimmed, it means the policy has been set at a higher level and can t be overridden locally.

As a member of the Account Operators, Enterprise Admins, or Domain Admins group, you can use Active Directory Users And Computers to create user accounts. Follow these steps:

37

1 Click Start, Programs or All Programs, Administrative Tools, and Active Directory Users And Computers. This starts Active Directory Users And Computers. 2 By default, you are connected to your logon domain. If you want to create OUs in a different domain, right-click the Active Directory Users And Computers node in the console tree, and then select Connect To Domain. In the Connect To Domain dialog box, type the name of the domain to which you want to connect, and then click OK. Alternatively, you can click Browse to find the domain to which you want to connect in the Browse For Domain dialog box. 3 You can now create the user account. Right-click the container in which you want to create the user, point to New, and then select User. This will start the New Object User Wizard. 4 When you create a new user, you re prompted for the first name, initials, last name, full name, and logon name, as shown in Figure 37-5. The pre Windows 2000 logon name then appears automatically. This logon name is used when a user logs on to Windows NT, Microsoft Windows 95, or Microsoft Windows 98.

Figure 37-5.

5 When you click Next, you can set the user s password and account options. The password must meet the complexity requirements set in the group policy. As shown in Figure 37-6, these options are as follows: User Must Change Password At Next Logon User Cannot Change Password Password Never Expires Account Is Disabled

37

Figure 37-6.

6 Click Next, and then click Finish. If you use a password that doesn t meet the complexity requirements of group policy, you ll see an error and you ll have to click Back to change the user s password before you can continue.

If you double-click a user account in Active Directory Users And Computers, a Properties dialog box appears, with tabs allowing you to configure the user s settings. Table 37-3 lists the user account properties.

Table 37-3.

Used to manage the account name, display name, e-mail address, telephone number, and Web page Used to manage geographical address information Used to manage logon name, account options, logon times, and account lockout Used to manage the user profile configuration (profile path, logon script) and Home Folder Used to manage home phone, pager, fax, IP phone, and cellphone numbers Used to manage the user s title and corporate information (department, manager, direct reports) Used to manage the Terminal Services startup environment