Creating User Accounts

Creating User Accounts
Last Updated: 25 Sep 2004
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

*** PLEASE NOTE: Link(s), If Provided, May Be Wrapped ***


User accounts and groups can be created via the GUI or
the command line (CLI) in 2000/XP and later versions
of Windows.


Here are the details for an account creation and group
management scenario:

=======================================
• User's Name ............ Joe User
• User's Acct Name ....... JoeU
• User's Workstation ..... HOMEPC
• Local Admin Group ...... HOMEPC\Administrators

• Other Workstation ...... OTHERPC
• Local Admin Group ...... OTHERPC\Administrators
=======================================


CREATE/ADMINISTER LOCAL ACCOUNT

Let's create an account for Joe and place his account
in the local Administrators group of his primary home
machine (HOMEPC)...

• GUI (Windows 2000/XP)
	Right Click on "My Computer"
	Select "Manage"
	Expand "Local Users and Groups"
	Right-Click on "Users"
	Select "New User..."
	Enter Name, Password and any other relevant info
	Select "Create"
	Select "Close"
	Expand "Groups"
	Double-Click on "Administrators" in the Right-Hand Pane
	Select "Add..."
	Type "JOEU" into the appropriate edit box
	Press "Check Names"

• CLI (Ye Ol' Command Line Interface)
	Logon to the console of HOMEPC
	START -> RUN -> CMD
	NET USER JoeU joe's_password_goes_here /FULLNAME:"Joe User" /ADD
	NET LOCALGROUP Administrators JoeU /ADD


CREATE/ADMINISTER REMOTE ACCOUNT

To manage accounts on remote systems (for which you have
admin access), use your local Account Management MMC and
change the focus to a remote system.

• GUI (Windows 2000/XP)
	Right Click on "My Computer"
	Select "Manage"
	Right Click on "Computer Management (Local)"
	Select "Connect To Another Computer..."
	Enter "OTHERPC"
	Expand "Local Users and Groups"
	Right-Click on "Users"
	Select "New User..."
	Enter Name, Password and any other relevant info
	Select "Create"
	Select "Close"
	Expand "Groups"
	Double-Click on "Administrators" in the Right-Hand Pane
	Select "Add..."
	Type "JOEU" into the appropriate edit box
	Press "Check Names"


WHITEPAPERS & TECH DOCUMENTS

• http://KB.UltraTech-llc.com/Docs/?File=Secure2000Pro.htm
• http://www.microsoft.com/windowsxp/home/using/productdoc/en/net_user.asp
• http://support.microsoft.com/?KBID=199878
• http://msdn.microsoft.com/library/periodic/period98/ewn0498.htm
• http://support.microsoft.com/?KBID=251394
• http://support.microsoft.com/?KBID=137978


PERSONAL NOTES

• The NET USER command supports a /RANDOM parameter which
  will generate a random complex password. If you use the
  paramater as /RANDOM:xx it will generate a password of
  the length represented by XX.

• You can make command line changes remotely using
  various tools from the Resource Kit, or from the
  excellent http://www.sysinternals.com website.

• In most instances, the CLI approach to account creation
  is faster and more straightforward than the GUI method.

• There are a few subtle differences in the dialog boxes
  across the various versions of Windows.

• You can use PSEXEC from sysinternals.com to run NET USER
  or NET LOCALGROUP on a remote system for the purpose of
  administering users and groups.