Creating a User (Domain)

In this guide you will learn how to create a Domain User; both Administrator and Standard level accounts.

Before We Begin...
You must know the difference between a Local and Domain User:
 * A Local User, if it's an Admin level account this could also be referred to as Local Admin, is the Admin or Standard account on the computer. As a Local Admin you would have Admin rights over everything on the computer itself. Anything shares hosted on your computer you have Admin rights to, but that account only has Admin rights over that computer. Nothing else.
 * A Domain User, Admin accounts would be called Domain Admins, is a Standard or Admin level account on the Network as a whole. This means that a Domain Admin/User can sign into any computer with appropriate rights to everything on that computer, AS LONG AS that computer is attached to the domain and on the network. If the computer isn't attached to the network or not on the domain, this Account will not work. You won't even be able to log in because the computer has no where to pull the account settings from.

Getting There...

 * 1) You need to be on the server hosting your Active Directory. This will not work on any other Server. Period
 * 2) This is the first step because a lot of places will have their ADDS (Active Directory Domain Services referred to as ADDS or Active Directory) separate from other roles
 * 3) Connect to the Server
 * 4) If you're connecting Remotely, you must have permission to do so first
 * 5) If you need help getting connected, please see our guide on Connecting Remotely
 * 6) Open the Start Menu
 * 7) Mouse over the Programs option
 * 8) See 5.1
 * 9) Mouse over Administrator Tools
 * 10) This option might be available in the Start Menu depending on your Server OS
 * 11) Click Active Directory Users and Computers
 * 12) Select the folder labeled 'Users'

Creating the User...

 * 1) Right Click and hover over New
 * 2) Select 'User' from the list
 * 3) You can also click the 'New User' icon in the toolbar at the top
 * 4) Fill in the name fields
 * 5) This is not the log in name. It's literally the name of the person the account is being tied to
 * 6) Example: John/Jane Smith
 * 7) Assign User Logon Name
 * 8) This the name they will use when they log into the computer
 * 9) Example: Accounting, John, Jane, etc...
 * 10) Set the password
 * 11) Before doing this please see the 'Password Options' section below. Some of the settings or situations mentioned there could apply to you and give you and easier way to do things
 * 12) Click the 'Next' button
 * 13) Click the 'Finish' button

Assigning Admin Rights...

 * 1) For this you need a Domain User already created. To get to this section, because you already have one created, follow the steps in the 'Getting There...' section of this guide
 * 2) Right click the Domain User account in the list
 * 3) Select the 'Add to group...' option from the list
 * 4) Type in 'Domain Admins' into the Name field
 * 5) Click the 'Check Name' button
 * 6) If the group exists in the Domain, it could be under a different name or was deleted, it will then underline what you typed in. In some cases it will add to it or correct the spelling
 * 7) Click the 'OK' button
 * 8) Click the 'OK' button

Password Options
For the password you have 4 different settings you can select for password management.
 * 1) User must change password at next logon
 * 2) This option is the best option if you're letting the customer manage their own passwords and you are creating the accounts prior to deployment. I recommend you check this option ONLY when you are JUST creating the accounts. If you're going to have to log on and off the accounts, which you will need to do for updates, leave this unchecked. It will only cause you unnecessary delays.
 * 3) User cannot change password
 * 4) This is the setting you would use in the event you have control over password management. This makes it so that only a Domain Admin can change their password. Makes it easy and harder at the same time. I would think about the type of clients you have on the domain. Are they forgetful? If you have the time to deal with them all the time, by all means check this box! Usually if the customer wants to set their own passwords or manage them themselves, you'll be told.
 * 5) Password never expires
 * 6) This is almost always a staple. Without this box being checked, it will prompt the user to change their password every X amount of days. X being whatever the adjusted/default value is. I would click this unless the customer has specifically said they are taking care of password management.
 * 7) Account is disabled
 * 8) This is a rare option. You wouldn't be choosing this on a normal install. I would use this in the event one of the users is on an extended vacation or was released from employment until you can get through whatever process your company/customer has for their data. Doing this makes it impossible to log into the account until it is re-enabled.