Managing Access Permissions with Group Accounts
Every Windows Vista computer has the same set of default groups, which includes
groups for performing administrative and maintenance tasks. If you’re using an Admin-
istrator account, your account is a member of the Administrators group. If you’re using
a standard user account, your account is a member of the Users group. For most at-
home uses of Windows Vista, these are the only groups you’ll ever need to use.
Although all Windows Vista computers have the same set of default groups, each
computer sees its groups as being different from the local groups on any other com-
puter. This occurs because computers track groups with unique SIDs rather than dis-
play names. At the office, your network will have its own unique groups, which are
also different from your computer’s groups.
Creating Local Groups
If you find that you need additional groups beyond the Administrators and Users
groups, you can create local groups on your computer. You create local groups by
completing the following steps:
1. Click Start and then click Control Panel.
2. In the Control Panel, click System and Maintenance.
3. On the System and Maintenance page, scroll down and then select Administra-
tive Tools.
4. On the Administrative Tools page, double-click Computer Management.
5. In Computer Management, double-click Local Users and Groups under System
6. Select the Groups node to display a list of the current groups on your computer,
as shown in Figure 18-14.
7. Right-click Groups and then select New Group. This opens the New Group dia-
log box, shown in Figure 18-15.
8. Type a name and description for the group.
9. Click the Add button.
10. In the Select Users dialog box, shown in Figure 18-16, type the name of a user
you want to add to the group. This must be the username rather than the full
name of the account.
11. Click Check Names and then do one of the following:
If a single match is found for each entry, the dialog box is automatically
updated as appropriate and the entry is underlined.
If multiple matches are found, you’ll see an additional dialog box that allows
you to select the name or names you want to use, and then click OK.
If no matches are found, you’ve probably entered an incorrect name. Mod-
ify the name in the Name Not Found dialog box and then click Check
Names again.
Chapter 18: Managing User Accounts and Parental Controls
You must enter the username rather than the full name of the account.
If you changed the username by following the directions in the
“Changing Your Account Name” or “Changing User Account Names
for Other People” sections, earlier in this chapter, you actually
changed the full name associated with the account rather than the
username. To view the usernames associated with accounts on your
computer, open Computer Management. Double-click Local Users
and Groups under System Tools. Select the Users node and then dou-
ble-click the user account.
Figure 18-14. Viewing the groups on your computer
Figure 18-15. Creating a group and adding members

Get Windows Vista Security: Praxisorientierte Sicherheit für Profis now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.