Exam 4 chapter 12 Flashcards
User accounts have two main functions
Provide a method for users to authenticate themselves to the network
Provide detailed information about a user
are used to organize users so that assignment of resource permissions and rights can be managed more easily than working with dozens or hundreds of individual user accounts
Group accounts
In a large network, a scheme for naming user and group accounts as well as network devices is crucial. Consider the following:
Is there a minimum and maximum number of characters user account names should have?
Should the username be based on the user’s real name or if security is important, should names be more cryptic?
Some OSs distinguish between uppercase and lowercase letters. Should usernames contain both as well as special characters?
Considerations for password naming conventions:
Minimum length
Complexity requirements – use of uppercase and lowercase along with special characters
User or administrator created
Password change frequency
Group account names should reflect
the group membership or the resource to which the group is assigned permissions
When Windows is first installed, two users are created
Administrator and Guest (usually disabled)
The Administrator account has full access to a computer
Windows domain users are created in
Active Directory Users and Computers
You can create folders for organizing users and groups (called
organization units or OUs)
Group scope has three options:
Domain local, Global,Universal
Can be used to assign permissions to resources only in the domain in which the group is created
Domain local
The default option and contains users from the domain in which they are created but can be assigned permissions to resources in other domains
Global
Used in multidomain networks; users from any domain can be members and be assigned permission to resources in any domain
Universal
Group type has two options:
Security (default)
Distribution
Group scope has three options:
Domain local
Global
Universal
a collection of user’s personal files and settings that define their working environment
Created when a user logs on for the first time
User profile
A user profile stored on the same system where the user logs on is called a
local profile
follows the user no matter which computer he or she logs on to
a roaming profile
Stored on a network share
Any changes the user makes to the profile are replicated from the locally “cached copy” to the profile on the network share when the user logs off
Roaming profiles are rarely used in workgroup networks but is a feature Active Directory administrators use frequently
roaming profile
discard a user’s profile changes at log off so the profile is always the same
Mandatory profiles
User and group accounts in Linux are used for the same purpose as Windows:
User authentication and authorization
Linux also has a default user who has full control over the system – named
root
Use the command to create groups
groupadd
Network administrators need to
Make sure enough storage space is available to store files needed
Manage who has access to file storage
Prevent users from storing inappropriate types of data on company servers
a device, such as a hard disk, that is connected to a storage controller on the server
Locally attached storage
is part or all of the space on one or more disks that contains (or is ready to contain) a file system
In Windows, volumes are assigned a drive letter
A volume
is sometimes used interchangeably with volume but don’t always describe the same thing
In Windows, a basic disk can be divided into one to four partitions
partion
can be formatted with a file system and assigned a drive letter (considered a volume)
primary partition
is divided into one or more logical drives that can be formatted and assigned a drive letter (considered a volume)
Extended partition
Only a primary partition can be the
active partition (partition that can hold boot files)
The active primary partition storing the Windows boot loader is referred to as the
system partition
The partition or logical drive holding the Windows OS files is called the
boot partition
can be divided into one or more volumes; the term partition is not used in this context
Linux systems refer to disks by using their device driver name plus a letter, starting with “a”
Example: /dev/sda
dynamic disk
The File Allocation Table (FAT) file system has two variations:
FAT16 is usually referred to as FAT and has been around since the mid-1980s
Supported by most OSs
FAT32 was released with Windows 95 OSR2 in 1996
is limited to 2 GB partitions in most cases
FAT16
allows partitions up to 2 TB but in Windows 2000 and later, Microsoft limits them to 32 GB because the file system becomes noticeable slower with larger partition sizes
FAT32
limit amount of data users’ files can occupy
Disk quotas
No need for a drive letter to access
Volume mount points
allows users to restore older file versions or files that were accidentally deleted
Shadow copies