Windows 2000 Pro: The Missing Manual

Chapter 17. Security, Accounts, and Administration

On a large network, virtually all administrative chores are centralized; you probably have little or no control over the configuration of Windows 2000. Truth be told, most people who aren’t professional computer nerds don’t want to have to deal with technical matters. However, if you’re using Windows 2000 Pro as a stand-alone machine (or on a peer-to-peer network), you can’t call the administrator when something goes wrong—you are the administrator.

This chapter describes the Windows 2000 tools that fall under the category of “administration.”

Security Basics

If there’s one thing Windows 2000 is good at, it’s security. In fact, there are so many ways to make your computer and data secure, you can easily tie yourself into knots.

How much security is enough? The decisions are much like the ones you have to make about your home. Yes, you can install a burglar alarm, locks, bars on windows, and a guard dog. You’ll increase security, but also increase the chances of setting off false alarms, losing keys, getting trapped in a fire, and getting bitten. Computer security offers the same tradeoffs: You want enough security to discourage invaders, but not so much that you’re constantly running into roadblocks of your own making.

Here are a few of the steps you can take to keep your data private:

• Keep your computer and data physically secure. If people wander into your workspace all the time, always log off before leaving your computer, or use ...