Managing User Access and Security Understanding User and Group Accounts 125 Managing User Account Control

ol and Elevation Prompts 131 Managing Local Logon 137 Managing Stored Credentials 144 Managing Local User Accounts and Groups 149 Managing Remote Access to Workstations 159 Computers running Windows 7 can be configured to be members of a homegroup, a workgroup, or a domain. When a workstation is configured as a member of a homegroup or a workgroup, user access and security are configured on the workstation itself. When a workstation is configured as a member of a domain, user access and security are configured at two levels: the local system level and the domain level. User access can be configured at the local system le vel for a specific machine and at the domain level for multiple systems or resources throughout the current Active Directory forest. In this chapter, you ll learn how to manage local system access and local accounts. For further discussion of configu ring domain access and permissions, see Windows Server 2008 Administrator s Pocket Consultant, Second Edition (Microsoft Press, 2010). Keep in mind that every task examined in this chapter and throughout this book can be performed through a local logon or a remote desktop connection. Understanding User and Group accounts Windows 7 provides user accounts and group accounts (of which users can be members). User accounts are designed for individuals. Group accounts, usually referred to as groups, are designed to simplify the administration of multiple u sers. You can log on with a user account, but you can t log on with a group account.