Copyright: Monday, July 09, 2001 08:14:42


Identifies the user account. The user name cannot be changed from this dialog box.

To change the name of an existing user account, close the dialog box. In the details pane of Local Users and Groups, right-click the user account, and then click Rename.


Provides a space for you to type the user's complete name. It is a good idea to establish a standard for entering full names so that they always begin with either the first name (Kevin F. Browne) or the last name (Browne, Kevin F.).


Provides a space for you to type any text describing the user account or the user.


Specifies whether the user must change the password at the next logon.


Specifies whether the password will never expire and overrides the Maximum Password Age setting in the Password policy in Group Policy. Select this option when you will assign services such as Directory Replicator using Services. This setting overrides User must change password at next logon.


Specifies whether the user cannot change the assigned password. This option is usually selected only for accounts that are used by more than one person, such as the Guest account.

This setting has no effect on members of the Administrators group.


Specifies whether the selected account is disabled.

The built-in Administrator account cannot be disabled.


Specifies whether the account is locked out, which means the user will be unable to log on. If the account is currently locked out, this check box is selected and available. You can clear the check box to unlock the account.

If the account is not locked out, the check box is cleared and shaded. You cannot use this option to lock an account. The only way an account can be locked is if the user tries to log on more than the number of logon attempts specified in the Password policy of Group Policy. If you want to prevent use of an account, disable it. A user whose account has been disabled will not be able to log on until a member of the Administrators group enables the account.


Provides a space for you to type the user profile path to the user account.

To enable a roaming or mandatory user profile for the selected user account, in this space type a network path in the form \\server name\profiles folder name\user name. For example, \\puma\profiles\johnch.

To assign a mandatory user profile, in this space type a network path in the form \\server name\profiles folder name\user profile name. For example, \\puma\profiles\clerks.

To assign a mandatory user profile, you must also copy a preconfigured user profile to the location that you specify in this space. For more information, see Assign a mandatory user profile in Help.


Provides a space for you to type the name of the logon script. If the logon script is located in a subdirectory of the default logon script path, precede the file name with that relative path.

For example, to store the Startup.bat logon script stored in \\ComputerName\Netlogon\FolderName, in Logon script, type:

FolderName\Startup.bat


Specifies a local path as the home folder. Type a local path in the space provided.

For example, you might type c:\users\johnch.


Specifies a shared network directory as the home folder. Enter a drive letter in Connect, and then type a network path in To.

For example, you might specify drive J, and then type \\airedale\users\claym.


Lists the groups in which the user account is a member.


Click to select a group in which to add this user account.


Removes the user from the selected group.


Lists the user accounts and global groups that belong to the local group.


Click to add user accounts or global groups to the local group.


Removes the selected user account or global group from the selected local group.


Provides a space for you to type the group account description.


Identifies the group account. This name cannot be changed from here. To change the name, close this dialog box, click the group in the details pane, click Action, and then click Rename.


Specifies whether to administer users and groups on the computer you are currently using.


Specifies whether to administer users and groups on a remote computer.


Provides a place for you to type the name of the remote computer on which you want to administer users and groups.


Click to browse for a remote computer. The remote computer must be running Windows 2000 or later.


Allows you to use a saved console to administer a different computer by typing mmc.exe /Computer=computername from the command line. When you type this command and then load a saved console, any snap-in within the console having this check box selected will now point to computername instead of the computer chosen when the snap-in was created.


Provides a space for you to type a name to identify the user account. A user name cannot be identical to any other user or group name on the computer being administered. It can contain up to 20 uppercase or lowercase characters except for the following:

"  /  \  [  ]  :  ;  |  =  ,  +  *  ?  <  >

A user name cannot consist solely of periods (.) or spaces.


Provides a space for you to type the user's complete name. It is a good idea to establish a standard for entering full names so that they always begin with either the first name (Louise G. Morgan) or the last name (Morgan, Louise G.).


Provides a space for you to type the user account or user description.


Provides a space for you to type a password using up to 256 characters. Passwords are case-sensitive. Type the password again in Confirm to confirm the password.


Provides a space for you to type the password again to confirm it. Passwords are case-sensitive.


Specifies that the user must change the password at the next user logon.


Specifies that the user cannot change the assigned password. This is usually selected only for accounts that are used by more than one person, such as the Guest account.

This setting has no effect on members of the built-in Administrators group.


Specifies that the password will never expire and overrides the Maximum Password Age setting in Group Policy. Select this option when you will assign services such as Directory Replicator using Services. This setting overrides User must change password at next logon.


Specifies that the selected account is disabled.

The built-in Administrator account cannot be disabled.


Creates this user account and clears this dialog box to create another user account.


Closes this dialog box and saves any changes you have made.


Provides a space for you to type a name that identifies the local group. A local group name cannot be identical to any other group or user name on the workstation or member server. It can contain up to 256 uppercase or lowercase characters except for the following:

"  /  \  [  ]  :  ;  |  =  ,  +  *  ?  <  >

A group name cannot consist solely of periods (.) or spaces.


Provides a space for you to type any text describing the group account.


Lists the members of the local group. User accounts from this workstation or member server can be members. If this workstation or member server participates in a domain, user accounts and global groups from the local domain and trusted domains can also be members.


Click to add a user account or global group to this local group account.


Removes the selected user account or global group from this local group.


Creates this local group and clears this dialog box to create another local group.


Closes this dialog box and saves any changes you have made.


Provides a space for you to type a password using up to 14 characters. Passwords are case-sensitive. Type the password again in Confirm password to confirm the password.


Provides a space for you to type the password again to confirm it. Passwords are case-sensitive.


Files that can be assigned to user accounts. Typically a batch file, a logon script runs automatically every time the user logs on. It can be used to configure a user's working environment at every logon, and it allows an administrator to influence a user's environment without managing all aspects of it. A logon script can be assigned to one or more user accounts.

See also batch program; logon script path; user account.


When typing the path for a home directory, a placeholder that you can enter as the last subdirectory in the path. The system later substitutes the user name of each user account for %USERNAME%.

MS-DOS client computers are not able to access the home directory on a FAT volume if the user name for at least one of the selected accounts is longer than 8 characters (or has an extension name longer than 3 characters). These computers can access the root directory of the share instead.

On NTFS volumes, you can use %USERNAME% regardless of the length of the user name.