MCSA/MCSE Self-Paced Training Kit (Exam 70-214): Implementing and Administering Security in a Microsoft Windows 2000 Network (Pro-Certification)

Chapter 2

User Accounts and Security Groups

About This Chapter

Security in the Microsoft Windows 2000 operating system is based on user authentication, the process of determining the identity of the person accessing the computer. Once the operating system has identified the user, it can enforce security restrictions based on the user's identity by applying rules, rights, and permissions.

A user account contains the information that identifies a user. Security groups allow you to combine any number of users who have similar security requirements into a single security group account and manage security for them as a unit.

Also covered in this chapter are security templates, which establish a level of security across the network. This chapter discusses what you need to know to manage and deploy security templates and provides information about troubleshooting common problems.

Understanding how to use security groups for users who require similar access to secure resources is crucial to effective administration and to passing the exam. Make sure you understand how to use permissions and security groups to both grant and restrict access to resources.

Before You Begin

To complete this chapter, you must have

• A test computer configured with Microsoft Windows 2000 Server and with Active Directory installed

• A test computer running Microsoft Windows 2000 Professional and joined to the server's domain

  You can use Windows XP Professional in these exercises if you enable the Classic Start Menus on the Start Menu tab of the Taskbar And Start Menu Properties window.