Figure The General tab of the Active Directory user Properties dialog box

Member Of

Dial-in | Environment | Sessions

Remote control

Terminal Services Profile | COM+

General ] Address

Account | Profile | Telephones | Organization

P Kaitlin M

Donald

First name: Last name: Display name: Description: Office:

| Kaitlin Initials: |M

I Donald

kaitlin M. Donald

|Sales VP

lsc-1

Telephone number:

E-mail:

Web page:

1408-555-1234 Other... |

I [email protected] com

Other... |

□K | Cancel | Apply

FIGURE 3.5 The Address tab of the Active Directory user Properties dialog box

FIGURE 3.5 The Address tab of the Active Directory user Properties dialog box

Active Directory Account Address Tab

Controlling Active Directory Users' Accounts

Using the Account tab, shown in Figure 3.6, you can control the user's account. This tab shows the logon name information that you supplied when you set up the new user account and allows you to configure these settings:

■ The user logon name and principal name suffix

■ Pre-Windows 2000 user logon name

■ The logon hours for the user

■ The computers that the user is allowed to log on to

■ Account lockout options

■ Account options that apply to the user

■ When the account expires

FIGURE 3.6 The Account tab of the Active Directory user Properties dialog box

FIGURE 3.6 The Account tab of the Active Directory user Properties dialog box

Windows Server 2003 Account Options

The settings for logon hours, controlling computer access, account options, and account expiration are described in the following sections.

Controlling Logon Hours

When you click the Logon Hours button, you'll see the Logon Hours dialog box, as shown in Figure 3.7. By default, users are allowed to log on 24 hours a day, 7 days a week. Logon hours are typically restricted during computer backups. You might also want to restrict logon hours for security reasons. A blue box indicates that logon is permitted. A white box indicates that logon is not permitted. You can change logon hours by selecting the hours you want to modify and clicking the Logon Permitted radio button or the Logon Denied radio button.

Controlling Computer Access

When you click the Log On To button, you'll see the Logon Workstations dialog box, as shown in Figure 3.8. This dialog box allows you to specify that the user can log on to all the computers in the domain (default) or limit the user to logging on to specific computers in the network.

For example, if the Administrator works in a secure environment, you might limit the Administrator account to log on only to a specific computer. You configure the computers that the user can log on to based on the computer's name. You add the computers that are allowed by typing in the computer name and clicking the Add button.

FIGURE 3.7 The Logon Hours dialog box

FIGURE 3.7 The Logon Hours dialog box

FIGURE 3.8 The Logon Workstations dialog box

Was this article helpful?

0 0

Post a comment