Windows 2000 Top
Networking Issues
How can I automate the creation of user accounts?
We examine some of the
Assuming you don't wish to opt for a third party tool, there are two ways of
most common network
automating the creation of user accounts within Windows 2000. The easiest way
related calls that have
is to use NETDOM, which is a tool which ships with the Windows 2000
Resource Kit. You'll also find the program on the Windows 2000 CD ROM as
recently been coming in
part of X86\Support\Tools\Support.cab, which you'll need to unpack if the
to Microsoft's support
installation of Win2k hasn't already done this for you. Note that you should
not use any other version of NETDOM apart from that which ships with
department.
Windows 2000, as previous versions don't support all of Windows 2000's
functionality. The syntax for adding a user from a command line (or batch file,
By PCNA Staff
of course) via NETDOM is:
NETDOM /Domain:MYDOMAIN /user:adminuser /password:apassword
MEMBER MYCOMPUTER /ADD
Note how the /USER and /PASSWORD switches let you specify the account
name and password of a user who has permission to create new accounts.
NETDOM can also be used to join a user to a domain from the command line or
a batch file. This can apply to Windows NT workstations and standalone servers.
If you have administrative access to the PDC (such as through a user account
member of the Local Administrators or Domain Administrators groups), NET
DOM automatically creates the computer account if necessary. The syntax is:
NETDOM /Domain:MYDOMAIN /user:adminuser /password:apassword
MEMBER MYCOMPUTER /JOINDOMAIN
The command line above may be run on any computer as soon as you have
administrative access to the computer MYCOMPUTER. If you are already logged
onto the domain with an administrator account, then the options /DOMAIN,
/USER and /PASSWORD are not required.
How do we set user rights?
To set users' rights on a Windows 2000 machine, go to Start/Settings/Control
Panel. Double click Administrative Tools, and then double click Local Security
Policy. Double click Security Settings, double click Local Policies, and then dou
ble click User Rights Assignment. Double click the user right you want to change.
Click Add, and then click the accounts to which you want to assign the right. Click
OK, and then click OK again. To confirm the changes have taken effect locally,
close the Local Security Policy window and then open it. The newly assigned
rights should show under the Effective Settings column. If the rights are not being
assigned locally, check to see what Group Policy objects are being applied through
Active Directory, and whether those Group Policy objects have settings that are
in conflict with the local settings.
To access the Domain and OU level, open Active Directory Users And Computers
from the Administrative Tools panel. To modify the OU or domain level user
rights from within Active Directory Users And Computers, select the OU or
domain that contains the objects (computers) to which you want that user right
assigned. Right click the OU or domain, and then click Properties. Click the Group
Policy tab, and then double click the Policy name in the Group Policy Object
Links. If none exists, click New, and then double click the newly added policy.
From Computer Configuration, Windows Settings, Security Settings, Local Poli
Issue 129:April 2001
PC Network Advisor
File: E1725.1
page 17
End User Support:Windows
www.pcnetworkadvisor.com
<< < GO > >>
New! The best sites for quality inkjet printer cartridges and the best sites for cheap inkjet cartridges