Study notes covering Manage Identity.

Terminology

Workgroup – Peer-to-peer networking (common in SOHO environments).

• Advantages: Simple setup, no server required.
• Disadvantages: Limited scalability, no centralized management.

Domain – A server running Active Directory; a collection of network resources that share a common directory database.

• Advantages:
  • Efficient management
  • Scalable
  • Easier backups
  • Increased security
• Disadvantages:
  • More expensive
  • Complex to configure
  • Longer to implement

Object – Any network resource, such as a user account, group, application, or device.

Organizational Units (OUs) – Containers within Active Directory used to organize objects (users, groups, computers, etc.).

User Account – Identifies an individual user and allows assignment of rights and permissions.

Group – A collection of user accounts that can be managed together by assigning rights and permissions collectively.

Default User Accounts

• Standard Users

  • Can browse the internet, run software, and access resources.
  • Cannot change system settings.

• Administrator

  • Full control over the system.
  • Can add/remove hardware, install/uninstall software, and create/delete users.

• Guest

  • Provides temporary or limited access.
  • Disabled by default for security.

Default Groups

• Administrators Group

  • Full administrative privileges.
  • Should be tightly controlled and secured.

• Users Group

  • Restricted privileges.
  • Requires admin approval for changes.
  • Default group for standard users.

• Power Users Group

  • More privileges than Users but less than Administrators.
  • Legacy use—modern Windows systems rely more on standard/administrator roles.

Credential Manager

• Windows built-in password manager.
• Stores credentials (usernames/passwords) for websites, applications, and network shares.

Password Settings (Policy Options)

• Enforce Password History – Prevents users from reusing old passwords.
• Maximum Password Age – Forces password changes after a set number of days.
• Minimum Password Age – Prevents users from immediately changing back to an old password.
• Minimum Password Length – Defines the required length of a password.
• Password Complexity Requirements – Requires inclusion of uppercase, lowercase, numbers, and special characters.
• Store Passwords with Reversible Encryption – Used for compatibility with certain applications; considered insecure and generally not recommended.