Workgroup – Peer-to-peer networking (common in SOHO environments).
- Advantages: Simple setup, no server required.
- Disadvantages: Limited scalability, no centralized management.
Domain – A server running Active Directory; a collection of network resources that share a common directory database.
- Advantages:
- Efficient management
- Scalable
- Easier backups
- Increased security
- Disadvantages:
- More expensive
- Complex to configure
- Longer to implement
Object – Any network resource, such as a user account, group, application, or device.
Organizational Units (OUs) – Containers within Active Directory used to organize objects (users, groups, computers, etc.).
User Account – Identifies an individual user and allows assignment of rights and permissions.
Group – A collection of user accounts that can be managed together by assigning rights and permissions collectively.
-
Standard Users
- Can browse the internet, run software, and access resources.
- Cannot change system settings.
-
Administrator
- Full control over the system.
- Can add/remove hardware, install/uninstall software, and create/delete users.
-
Guest
- Provides temporary or limited access.
- Disabled by default for security.
-
Administrators Group
- Full administrative privileges.
- Should be tightly controlled and secured.
-
Users Group
- Restricted privileges.
- Requires admin approval for changes.
- Default group for standard users.
-
Power Users Group
- More privileges than Users but less than Administrators.
- Legacy use—modern Windows systems rely more on standard/administrator roles.
- Windows built-in password manager.
- Stores credentials (usernames/passwords) for websites, applications, and network shares.
- Enforce Password History – Prevents users from reusing old passwords.
- Maximum Password Age – Forces password changes after a set number of days.
- Minimum Password Age – Prevents users from immediately changing back to an old password.
- Minimum Password Length – Defines the required length of a password.
- Password Complexity Requirements – Requires inclusion of uppercase, lowercase, numbers, and special characters.
- Store Passwords with Reversible Encryption – Used for compatibility with certain applications; considered insecure and generally not recommended.