Creating user accounts is a snap with Windows Server 2003. It is definitely something you need to know how to do as a network administrator or if you are in the process of achieving a MCSE or MCSA certification.

The New Object - User wizard walks you through the task. Within Active Directory Users and Computers, simply right click the OU or container in which you want to create the account, point to New and click User. This brings up the New Object - User wizard.

Once you type in the first and last name of the user, the full name field is automatically generated based on the information you provided. You must provide a user logon name. This will be the name that the user types in when they log on to the network. The name you type in here should be based on the naming convention implemented. Some network administrators use a user’s first name and last initial and others use the first initial and last name. Either way, the point being is to come up with and stick to a naming convention for creating user logon names. You’ll probably notice as well when you create an account that the pre-windows 2000 name is also generated automatically based on the user logon name. Once you’ve put in all the information, click Next and you can configure the account options.

The account options you select will depend on your network administrative practices. For example, most administrators will assign the user account a password when it’s created and then have the user change it, coming up with their own password the first time they log on. In any case, the available options are summarized below:

• User must change logon at next logon on - Select this options if you want the user to come up with their own password the very first time they log onto the network.

• User cannot change password - Select this option if you don’t want the password changed on the account. This option is useful for guest accounts or accounts that are used by multiple users as well as service accounts.
• Password Never Expires - Selecting this option will override any options configured within a group policy.
• Account is disabled - Select this option if you want the account to be disabled so no one is able to log on with it.

Once you’ve selected all the necessary options, click Next, review the information to ensure it’s correct and click Finish. The account will appear under the OU in which it was created.

Of course, you can also create user accounts from the command line using the dsadd user command-line utility. Once accounts are created the account attributes can be modified through the Active Directory Users and Computers interface or from the command-line using the dsmod user command-line utility.

You can create a new user account in Windows Server 2003 using the following steps:

1. Click Start, point to Administrative Tools and click Active Directory Users and Computers.

2. Expand your domain within the right pane of the snap-in.
3. Right click the organizational unit in which you want to create the new user account, point to New and click User.
4. In the New Object - User window type in the first and last name of the user (the Full name field is automatically filled in).
5. Type the User logon name. Select the UPN suffix from the drop-down list that will be appended to the logon name. The pre-windows 2000 name is automatically generated. Click Next.
6. Type in a password for the user account and select any password options. Click Next.
7. Click Finish.

In the next article, you’ll learn about the various settings that you can configure for a user account.