Chapter 6
As a desktop support professional, you must be able to configure and trou-
bleshoot a variety of Windows XP security-related features, programs, and
settings. This chapter focuses on security in terms of local and domain
accounts, user and group rights, security configuration with group policy
objects (GPOs), the Security Configuration and Analysis Microsoft
Management Console (MMC) snap-in, and the logistics of logons.
Local User Accounts
If it weren’t for individual user accounts, we’d all log on and have the same
menu settings, privileges, and files. By enabling multiple user accounts,
Windows XP provides a way for users to protect their files from others, even
from another user account on the same computer. It also provides a way to
differentiate the patchwork of user preferences and properties known as the
user’s profile.
Local user accounts that exist on a computer running Windows XP enable a
user to log on by means of credentials stored in the local system, rather than
by values stored centrally on an authenticating server, known as a domain
controller. The Windows NT 4.0 Server, Windows 2000 Server, and
Windows Server 2003 operating systems have the ability to be configured as
domain controllers.
A desktop support technician must understand the distinction between a
local and a domain account and how each is represented by the user profiles
that are stored on a computer running Windows XP. The accounts are visi-
ble in the User Profiles page of the System Properties dialog box, as shown
in Figure 6.1.
Figure 6.1 Multiple profiles displayed within the User Profiles dialog box.

Get Supporting Users and Troubleshooting a Windows® XP Operating System Exam Cram™ 2 (Exam 70-27) now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.