□Īccount is locked out – Used to unlock or lock a user account. The user will not be able to log in to the system or access resources. □Īccount is disabled – To disable an account, check this box. Password never expires – Overrides policy forcing passwords to be changed after certain time. User cannot change password – This does not allow the user to change his or her own password. User must change password at next logon – Makes the user change the password on next logon. This is often set to the user's title or role. □ĭescription – A field for a short description of the user. This should be filled correctly for documentation. As shown in Figure 8.7, there are fewer tabs in the local user properties than in Active Directory user properties: ■įull name – Modify the full name of the user. To access the user properties, right-click the user and select Properties. Local user accounts may also be managed from this area much like managing users in Active Directory except with fewer options. d.Īccount is disabled – If checked, the account will be disabled and the user will be unable to log on. Generally, this is not recommended, but cases may arise when necessary. Password never expires – if checked, the password will not expire per policy settings. Generally, this is not recommended but cases may arise when necessary. User cannot change password – If checked, the user will not be able to change the password. This is standard when an administrator is creating an account for another user. User must change password at next logon – If checked, the user will be prompted to change his or her password at logon. Password – Create a password for the user ensuring complexity and policy requirements are met. c.ĭescription – A description of the user, generally, this is the title of the user. b.įull Name – The full name of the user for proper documentation and identification. The name should follow the username policy convention. Username – The logon name the user will use to log on. Right-click Users in Computer Management | System Tools | Local Users and Groups and select New User… or right-click the open area in the details pane of users and select New User. A new local user may be created in the Computer Management MMC as shown in Figure 8.6: 1.

Disable last user logon windows 7