User and Groups Accounts
- Local Accounts versus Domain Accounts
- Local account are created on a NT Workstation or NT Server
- Local (macihine) accounts are only usable locally
- Created with User Manager
User Manager Icon:

- Domain account are created on a PDC
- Domain accounts can be used anywhere in the network
- Created with User Manager for Domains
User Manager for Domains Icon:

- Local Groups
- Local groups can be created on any NT based machine
- Local groups are created with User Manager
- Are only usable on the machine where they are created
- May contain user accounts from the local machine
- May contain global groups from any trusted domain
- Cannot contain local accounts from other machines
- Global Groups:

- Global groups are created on the PDC of a domain
- Global groups are created with User Manager for Domains
- Identified by the globe icon
- Used in any trusted or local domain
- Contain only local (domain) accounts
- Cannot contain local groups or accounts
- User Profiles
- Profiles restrict the user's environment and local access
- Mandatory profiles have an extension of .MAN
- users cannot change anything in a mandatory profile
- Personal profiles can have any extension (.USR by default)
- users may change personal profiles
- If profiles are server based, then profile will follow user
The Microsoft Windows NT Virtual Lecture by
Patrick Watson
Florida Community College at Jacksonville