From time to time when we mange an active directory or even a local computer we may need to reset user accounts, and we reset user accounts by resetting the password as we know a user must have both their names and their passwords in order to logon to the system. So, we reset their password. We are resetting their ability to gain access to resources. This might happen if the user forgets their password. We should be aware that the complexity of the systems in today's network resetting their password might not solve the entire problem. For example if they have keys that are associated with that password for access to other resources they may still have a problem. In another words their encryption keys are not going to work with the new password. Any internet passwords that they have that are based on their password will have to be reset as well. So it is just the beginning of a series of ** they may have to go through if they forget their password. So it is a training issue. User should be encouraged to use a complex password but also what is easier for them to remember. We also might need to reset computer accounts for example if we have restored a computer from a backup but the system would have put a different password. In another words the domain controller transfer password information that is it is automatically transferred between computers. If we have restored from backup there was previous to the current password than the password that the computer has will be out of date. So we need to reset the password at the computer. Let us take a look how we do each of these. So, we are going to go to active directory users and computers and we are going to go into the sales OU where Susan Brown is located and let us say we wanted to reset Susan Brown's password. Let us say Susan Brown calls us, "I can get on to the network, I am sorry I forgot my password", then we right click on Susan Brown's account, click on reset password and then we will type in a new temporary password for her, whatever we want to type in. Whatever is the standard that our company is using and then we click on user must change password in next logon. So, then we can tell Susan look I have reset your password, it is just temporary. This is your new password tell or on the phone or you can even send her an email. Because it will be just a temporary password to get into her account until she changes it at her next logon. This should be very soon. So, that way we can get Susan Brown's password reset. You should know this both for the real life as well as for the test. But there are going to be some issues with regards to encryption keys regards to internet password options as well. So Susan Brown now is taken care of the user account. I have a computer account, say that this computer click on computers, say this computer PC1, is out of date because we had to restore it from a backup and now the active directory is basically saying I cannot authenticate this machine. It does not have a valid password. We can reset the password by right clicking on PC1 and click on reset account. The system says, are you sure, you want to reset this computer account? We click on Yes and that is all to restore. So, we can reset user passwords and we can reset the computer accounts what we should be aware that in order to reset a user password, that is a domain user we must be a domain admin or some one with delegated permissions to be able to reset the password. And in order to reset a password for a user that is local to your machine first of all you can not use active directory user and computers, we have to use computer management console and then we will have to be a local administrator to reset that password. And regards to resetting account for computers we have to be either a domain admin and enterprise admin or an account operator in order to reset these accounts. You should be aware of this for real life as well as for the test. In addition to resetting the password we manage users and computers by putting them into the right places. And we can put them into right place when we create them, in another words in the right OU. But, things change in organization so we may want to move objects around. And we have new tools to move these objects around and Windows Server 2003. So in our next section we will discuss moving domain objects.
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |