CIS250

OPERATING SYSTEMS

WIN2k Lab # 3

• Creating User Accounts

• Defining User Profiles

• Creating Groups

• Setting System Policies

Creating User Accounts

• Every WIN2K user must have a user account– networked computers may have a domain or a

local account– non-networked computers always have a local

account

• Use the USERS AND PASSWORDS tool in control panel

User Accounts (contd.)• Set up a naming convention - one that is easy

to use/remember– first initial, last name

• Two User Accounts are setup automatically when WIN2K is installed– administrator - has privileges to do anything

– guest - not assigned password (but you can assign one); is disabled by default; has limited access

User Accounts - contd.• After an account is setup, you can manage

Certificates via the Advanced tab– new to WIN2K: allows absolute identification of users,

companies and systems• secure boot settings - CTRL-ALT-DEL

– prevents other programs from running during log on

• You can also change to which group a member belongs, but cannot edit a group

• To change a password, click the Set Password button

User Profiles• Each user has a profile

• Administrator enters info on the user’s home directory, logon script, where the profile is stored

• When a user picks a new wallpaper, changes system sounds or makes other config changes - the profile changes

User Profiles (contd.)

• Check boxes– User Must Change password at next login– User Cannot change password (if shared by

multiple people)– Password never expires (used for Admin

account, but not recommended for others)– Account Disabled - employee on leave– Account Locked - too many bad logon attempts

Groups

• Assign access to a group of users– saves on typing, errors

• Default: all users are Power Users

• Can assign users to another type of group– done though Local Users and Group console

Built-in Local Groups• Administrators - all power

• Power Users - share dir and printers; add/change, del printers, users, groups (del and change only the ones they created); change system clock

• Users - run applications, manage files, manage own profile, use printers

Groups

• Guests - limited access to files and programs

• Backup Operators - backup/restore files

• Replicator - Windows can copy files from one workstation to another

System Policies

• Can set in MMC or Local Security Policy console in Admin Tools in Control Panel

• Set a policy to determine:– how users logon– how passwords are treated – user rights of files, device drivers (system

default usually Admin only)

• WIN3.1 - cooperative, multi-tasking– share data,resources; multiple processes

execute concurrently; several processes appear to run at the same time

• UNIX - preemptive, multi-tasking - allocates CPU to processes based on preset time slices; a deadlock of one won’t affect others

• NT/WIN2K - preemptive, multi-tasking, multi-threaded: a process can break up into several threads of execution– default: process contains one thread: unique id,

registers contain state

• WIN95/98 - preemptive, multi-tasking uses predetermined time slices (default 20ms)– each button on task bar is a process– each is divided into threads, share CPU - take turns