Exam 4 chapter 12 Flashcards
(97 cards)
User accounts have two main functions
Provide a method for users to authenticate themselves to the network
Provide detailed information about a user
are used to organize users so that assignment of resource permissions and rights can be managed more easily than working with dozens or hundreds of individual user accounts
Group accounts
In a large network, a scheme for naming user and group accounts as well as network devices is crucial. Consider the following:
Is there a minimum and maximum number of characters user account names should have?
Should the username be based on the user’s real name or if security is important, should names be more cryptic?
Some OSs distinguish between uppercase and lowercase letters. Should usernames contain both as well as special characters?
Considerations for password naming conventions:
Minimum length
Complexity requirements – use of uppercase and lowercase along with special characters
User or administrator created
Password change frequency
Group account names should reflect
the group membership or the resource to which the group is assigned permissions
When Windows is first installed, two users are created
Administrator and Guest (usually disabled)
The Administrator account has full access to a computer
Windows domain users are created in
Active Directory Users and Computers
You can create folders for organizing users and groups (called
organization units or OUs)
Group scope has three options:
Domain local, Global,Universal
Can be used to assign permissions to resources only in the domain in which the group is created
Domain local
The default option and contains users from the domain in which they are created but can be assigned permissions to resources in other domains
Global
Used in multidomain networks; users from any domain can be members and be assigned permission to resources in any domain
Universal
Group type has two options:
Security (default)
Distribution
Group scope has three options:
Domain local
Global
Universal
a collection of user’s personal files and settings that define their working environment
Created when a user logs on for the first time
User profile
A user profile stored on the same system where the user logs on is called a
local profile
follows the user no matter which computer he or she logs on to
a roaming profile
Stored on a network share
Any changes the user makes to the profile are replicated from the locally “cached copy” to the profile on the network share when the user logs off
Roaming profiles are rarely used in workgroup networks but is a feature Active Directory administrators use frequently
roaming profile
discard a user’s profile changes at log off so the profile is always the same
Mandatory profiles
User and group accounts in Linux are used for the same purpose as Windows:
User authentication and authorization
Linux also has a default user who has full control over the system – named
root
Use the command to create groups
groupadd
Network administrators need to
Make sure enough storage space is available to store files needed
Manage who has access to file storage
Prevent users from storing inappropriate types of data on company servers
a device, such as a hard disk, that is connected to a storage controller on the server
Locally attached storage