Module 10: Configuring Windows XP Professional to

Operate in Microsoft Networks

Overview

Examining Workgroups and User Accounts

Creating and Authenticating Local User Accounts

Configuring Local Security

Configuring Networking Options in a Workgroup

Operating in a Domain

Lesson: Examining Workgroups and User Accounts

Examining Workgroups

Examining User Accounts

Examining Workgroups

Workgroup Characteristics:

Peer-to-peer network

No centralized administration

Examining User Accounts

Enable users to perform administrative tasks or gain temporary access to network resources

Reside in SAM (local built-in user accounts)

Reside in Active Directory (domain built-in user accounts)

Enable users to perform administrative tasks or gain temporary access to network resources

Reside in SAM (local built-in user accounts)

Reside in Active Directory (domain built-in user accounts)

Built-in User Accounts

Administrator and Guest

Enable users to log on and gain access to resources on a specific computer

Reside in Security Accounts Manager

Must be created on each computer

Enable users to log on and gain access to resources on a specific computer

Reside in Security Accounts Manager

Must be created on each computer

Local User Accounts

Enable users to log on to the domain to gain access to network resources

Reside in Active Directory

Enable users to log on to the domain to gain access to network resources

Reside in Active Directory

Domain User Accounts

Lesson: Creating and Authenticating Local User Accounts

Creating Local User Accounts

Authenticating Local User Accounts

SAM

User 1User 2User 3

SAM

User 1User 2User 3

SAM

User 1User 2User 3

SAM

User 1User 2User 3

Creating Local User Accounts

Authenticating Local User Accounts

Users log on locallyUsers log on locally11SAM

Credentials sent

Logon information comparedLogon information compared

22Access token

Access token createdAccess token created33

Lesson: Configuring Local Security

Introduction to Microsoft Management Console

Creating a Customized Security Console

Configuring Account Policies

Configuring Local Policies

Configuring Ctrl+Alt+Del Options

Configuring Logon Options in a Workgroup

Introduction to Microsoft Management Console

Console TreeConsole Tree

Snap-insSnap-ins

Details PaneDetails Pane

Creating a Customized Security Console

Configuring Account Policies

Password Policy

Account Lockout Policy

Configuring Local Policies

User Rights Assignment

Security Options

Configuring Ctrl+Alt+Del Options

Configuring Logon Options in a Workgroup

Changing the Welcome Screen

Enabling Fast User Switching

Disabling Fast User Switching

Lesson: Configuring Networking Options in a Workgroup

Installing Home and Small Network Networking

Configuring Connection Sharing

Configuring Network Settings

Installing Home and Small Network Networking

To gain access to Network Setup Wizard and Home and Small Network Setup checklist To gain access to Network Setup Wizard and Home and Small Network Setup checklist

Complete the checklist, and then click Network Setup Wizard to return to the wizardComplete the checklist, and then click Network Setup Wizard to return to the wizard33

On the Welcome page of the Network Setup Wizard, click Next, and then click Checklist for creating a network

On the Welcome page of the Network Setup Wizard, click Next, and then click Checklist for creating a network

22

Click Start, click Control Panel, click Network and Internet Connections, and then click Set up or change your home or small office network

Click Start, click Control Panel, click Network and Internet Connections, and then click Set up or change your home or small office network

11

Configuring Connection Sharing

Configuring Network Settings

Lab A: Operating in a Workgroup

Exercise: Joining a Workgroup

Lesson: Operating in a Domain

Requirements for Joining a Domain

Domain Computer Accounts

User Authentication in a Domain

Cached Credentials

Security Identifiers and Access Control Entries

Group Policy and Security Settings

Requirements for Joining a Domain

Joining a Domain Requires:

A domain name

A pre-existing computer account or the permission to create a domain computer account

An available domain controller and a server running the DNS service

Domain Computer Accounts

Domain computer accounts are necessary to log on to the domain

Users have the choice of logging on to the:

Local computer

Domain

Users must press CTRL+ALT+DEL to display the Log On to Windows dialog box

User enters a valid user name and password

User chooses whether to log on to the local computer or a domain

User Authentication in a Domain

Credentials are checked against Active Directory database

Users in a domain can log on from any domain computer that has been granted access

Cached Credentials

Credentials are cached in a secure area of the registry

Cached credentials enable log on if Active Directory is not available

Security Identifiers and Access Control Entries

A computer or user account is assigned a unique security identifier (SID)

A SID is verified when a user attempts to establish a connection with a domain resource

A SID is created for each account

Each directory object, or resource, is protected by access control entries (ACE)

Users logging on to the local computer may access domain resources; they will be prompted for a valid domain user name and password

Group Policy and Security Settings

Group Policy snap-in displays as Group Policy

Group Policy updates are dynamic and occur at specific intervals

If no changes to Group Policy, the client computer refreshes Security Policy settings at regular intervals

If no changes are discovered, Security Policy settings are processed

Lab B: Operating in a Domain

Exercise: Joining and Operating in a Domain