User accounts and group management are core system administration responsibilities. Indeed, it is impossible to introduce the concept of user account management without a discussion of groups. All users belong to one or more groups. Rights and privileges are assigned to default "built-in" or customized groups, and the user receives rights by becoming a group member.
Administrators with Windows 2000 experience should find the user and group account management very familiar. The primary differences reside in refined functionality. Windows NT administrators should also find the transition relatively straightforward, although a number of key interfaces, tools, and functions have been substantially advanced.
This chapter explores the nature of user accounts and groups and provides related management information. Upon completing it, you should be able to:
Understand the concepts underlying Windows Server 2003 user accounts and groups
Add, modify, and remove local and domain user accounts
Add, modify, and remove local and domain groups
Apply group membership to user accounts