COMPUTER SYSTEMS SERVICING NCII – GRADE 10/12

Quarter 1, Week 2-3

Module 1

User access level configuration

Learning Competency

LO1 Set Up User Access

1.2 Configure user access level based on NOS features
TLE_IACSS9-12SUCS-IIIa-e-37
What Is It

You must have found the activity challenging and have spent much time making
it perfectly done. Moreover, your output for sure may have the excellent mark. Now
answer the following questions mentally so that you can further examine your
understanding of what you are going to work into.

1. Can we create a user account on control panel options?

2. What is your favorite username to use in adding user accounts?
3. What are the privileges you are going to set on your accounts?
4. Are your going to add special permissions to access network printers or
devices?
5. How will you secure your server against intruders or hackers?
6. How can you create reliable and secure access to your clients in a network?

If you have answered most of this question, then you are now ready to dig
deeper understanding in creating user access level configuration in Windows Server
2016 and do not forget to take down notes.

Mini-Lesson

In this lesson, you will learn how to create new users and groups in Windows
Server 2016 using the User Accounts Control Panel applet and the Local Users and
Groups management console. This lesson also describes the different features of users
and groups and the management interfaces.

Management of Local Users and Groups

Unlike users and groups created in Active Directory or on Internet websites, local
user accounts and groups operate on a single Windows client and cannot be moved
between computers. A local user can be used for the following on a Windows client:

 Authentication and control

 Assignment of rights or permissions
 Management of resource access

A local group is a set of one or more accounts managed on a single client,

consisting of local and/or Active Directory users. Local groups can also be used to
manage access or assign rights and permissions to several users at once, depending
on business needs or user requirements. A local group can have many members and a
user account can be a member of many groups.

The User Accounts Control Panel

The User Accounts Control Panel allows you to manage both existing users and
new users, including account passwords and pictures, and other login settings. The
user account control panel makes creating new user accounts in Windows Server 2016
quick and easy. To launch the control panel, right-click on the start menu and select it
from the menu or use the Windows and R keys to open the Run Dialog and type control.
From there, select User Accounts on the Control Panel as shown below.

Creating a Local User

To create a new local user account, click Manage Another Account, then click
Add a user account as shown in the below image.

Step 1: Click Add a user account.

In the popup that follows, you will be prompted for the username and password
(twice) of the new user account that you want to create, along with a hint to help you
remember the password. The username and password are what you use to login to a
client computer.

We will create 'ExampleUser' and a basic password for testing purposes. A

secure user account relies on a strong password with numbers, lower-case and capital
letters, and symbol characters. Passwords should also be changed regularly and not
reused whenever possible.
 Step 2: Enter desired account information.

Click Next to continue. Windows will display a confirmation dialog box for the new
account. Click Finish and the user account will be created and be visible in the Manage
Accounts window, as shown below.

Step 3: New user in the User Account Control Panel.

There are four attributes associated with the ExampleUser local user account
which can be modified from the User Accounts control panel:
 Changing the username and picture
 Changing the password
 Changing the account type
 Deleting the account

When changing the account type, the options available are standard or
administrator. By default, new user accounts have the standard account type, which
provides limited control of the computer. Changing the account type to administrator
adds the account to the local group called Administrators. If an account is a member of
this group, it has full access and rights to everything on that local Windows computer.

The Local Users and Groups Snap-in

Local groups cannot be created using the User Accounts control panel. Creating
or managing groups requires the use of the Local Users and Groups snap-in. The Local
Users and Groups snap-in provides more functionality when managing local users and
groups.

To add Local Users, you need to follow the following steps in Windows Server
2016.

Step 1: Run [Server Manager] and Open [Tools] - [Computer Management].

Step 2: Right-Click [Users] under the [Local Users and Groups] on the left pane and
select [New User].

Step 3: Input Username and Password for a new user and click [Create] button. Other
items are optional to set.
 Step 4: After creating normally, New user is shown on the list like follows.

Step 5: If you would like to set administrative privilege to the new user, Right-click the
user and open [Properties].
Step 6: Move to [Member of] tab and click [Add] button.

Step 7: Specify [Administrators] group like follows.

 Step 8: Make sure [Administrators] group is added on the list and click [OK] button to
finish settings.

Another thing you can do on setting up Local users is that you can change
Administrator Username for security reason. Administrator accounts are one of the most
coveted targets for a threat actor to gain ownership and access to a Windows
Administrator account since the account username is “Administrator” by default.
Likewise, to minimize the risk and to keep this account secure the following are the
steps in changing the Administrator username.

Step 1: Run [Server Manager] and Open [Tools] - [Computer Management].

Step 2: Open [Local Users and Groups] - [Users] on the left pane and Right-click
[Administrator] and select [Rename] on the right pane. Then, change any name you like.

Step 3: Administrator Name is just changed.

 There are also ways to control and add users on Windows Server 2016 that is
with the use of Active Directory Domain Service. Using this process, you need to install
the ADDS first so that you can configure the user access level, privileges and
permissions of the local users you have created. Follow the following procedures to
successfully add and configure users on ADDS.

Installing Active Directory Domain Service.

Step 1: Run [Server Manager] and click [Add roles and features].

Step 2: Click [Next] button.

 Step 3: Select [Role-based or feature-based installation].

Step 4: Select a Host which you would like to add services.

 Step 5: Check a box [Active Directory Domain Services].

Step 6: Additional features are required to add AD DS. Click [Add Features] button.
Step 7: Click [Next] button.

Step 8: Click [Next] button.

 Step 9: Click [Next] button.

Step 10: Click [Install] button.

 Step 9: After finishing Installation, click [Close] button.

After installing the ADDS you need to configure New DC (Domain Controller). A
domain controller (DC) is a server computer that responds to security authentication
requests within a computer network domain. It is a server on a network that is
responsible for allowing host access to domain resources. Below are the steps to
completely setup the new Domain Controller.

Step 1: Run [Server Manager] and click [AD DS].

 Step 2: Click [More...] link which is upper-right.

Step 3: Click [Promote this server to domain...] link.

Step 4: Check a box [Add a new forest] and input any Domain name you would like to
set for [Root domain name] field.

Step 5: Select [Forest functional level] and [Domain functional level]. This example
shows to select [Windows Server 2016] both. Furthermore, set any password for
Directory Services Restore Mode.
 Step 6: Click [Next] button.

Step 7: Input NetBIOS name you would like to set.

Step 8: Specify Database folder or Log folder and so on. It is Ok to keep default if you
don't have specific requirements.

Step 9: Check the contents you configured and click [Next] button.
 Step 10: Click [Install] button.

Step 11: After finishing installation, System will restart.

 Step 12: After restarting System, logon name is changed as [Domain name]\[User
name].

Now that we have successfully install ADDS and our new Domain Controller, we
can easily add user accounts and manage it. Follow this simple steps to configure user
access on your Windows Server 2016.

Add User Accounts on Active Directory.

Step 1: Run [Server Manager] and click [Tools] - [Active Directory Users and
Computers].
Step 2: Right-Click [Users] on left tree and select [New] - [User].

Step 3: Input Username and Logon name for a new user.

 Step 4: Set initial password for a new User.

Step 5: Check contents you set and click [Finish] button.

 Step 6: A new user is just added.

Finally, you have made all the steps in configuring user access level on Windows
Server 2016. This time familiarize and review this step for these are very important
specially during your TESDA Assessment.