Mastering™ Network Security, Second Edition

12.4. User Accounts

In an AD network, user accounts are managed with the AD Users and Computers utility, which you can install on any workstation in the enterprise. You use this tool to add and remove users, assign groups, and create an appropriate OU structure for organization, administration, and delegation of objects within your domain. You manage all user access attributes through this interface except for file, directory, and share permissions. You set file system permissions through Windows Explorer.

In addition to domain accounts, non-domain controllers in a Windows 2000 network can also have local accounts. You create local accounts to assign permissions to non-domain users. You can grant someone access to your workstation and the applications ...