Author: Neftaly Malatjie

To delete a user account using the Windows interface

1. To open Active Directory Users and Computers, clickStart, click Control Panel , double-click Administrative Tools , and then double-click Active Directory Users and Computers .

To open Active Directory Users and Computers in Windows Server® 2012, click Start, type dsa.msc.

2. In the console tree, clickUsers.

Where?

1. • Active Directory Users and Computers\ domain node \Users

Or, click the folder that contains the user account.

3. In the details pane, right-click the user account, and then clickDelete.

Additional considerations

• To perform this procedure, you must be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. 
• Another way to open Active Directory Users and Computers is to click Start, click Run, and then type dsa.msc .
• After a user account has been deleted, all permissions and memberships that are associated with that user account are permanently deleted. Because the security identifier (SID) for each account is unique, a new user account with the same name as a previously deleted user account does not automatically assume the permissions and memberships of the previously deleted account. If you want to duplicate a deleted user account, you must recreate all permissions and memberships manually.
• You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click Start, click Administrative Tools, and then click Active Directory Module for Windows PowerShell. 

  To open the Active Directory module for Windows PowerShell in Windows Server 2012, open Server Manager, click Tools and then clickActive Directory Module for Windows PowerShell .

 

To delete a user account using a command line

1. To open a command prompt, clickStart, click Run, type cmd , and then click OK .

To open a command prompt in Windows Server 2012, click Start, type cmd , and then click OK .

2. Type the following command, and then press ENTER:

3.    dsrm <ObjectDN>

Parameter	Description
<ObjectDN>	Specifies the distinguished name of the user object to be deleted.

To view the complete syntax for this command, and for information about entering user account information, at a command prompt, type the following command, and then press ENTER:

dsrm /?

Every user who accesses a network must have a user account, and one of the most common network administration tasks is user account creation. Every operating system has specific steps to follow when creating user accounts. To create a new domain user account in Windows Server 2008, follow these steps:

1. Choose Start→Administrative Tools→Active Directory Users and Computers.

This fires up the Active Directory Users and Computers management console.

1. Right-click the domain that you want to add the user to and then choose New→User.

This summons the New Object — User Wizard.

2. Type the user’s first name, middle initial, and last name.

As you type the name, the New Object Wizard automatically fills in the Full Name field.

3. Change the Full Name field if you want it to appear differently than proposed.

For example, you may want to reverse the first and last names so the last name appears first.

4. Type the user logon name.

This name must be unique within the domain.

5. Click Next.

The second page of the New Object — User Wizard appears.

6. Type the password twice.

You’re asked to type the password twice, so type it correctly. If you don’t type it identically in both boxes, you’re asked to correct your mistake.

7. Specify the password options that you want to apply.

The password options available include requiring the user to change password at next logon, restricting the user from changing password. Also available is the option to make the password non-expiring and to completely disable the account.

1. Click Next.

You’re taken to the final page of the New Object — User Wizard.

2. Verify that the information is correct and then click Finish to create the account.

If the account information is not correct, click the Back button and correct the error. You’re done! Now you can customize the user’s account settings. At a minimum, you’ll probably want to add the user to one or more groups. You may also want to add contact information for the user or set up other account options.

A user account is a collection of settings and information that tells Windows which files and folders you can access, what you can do on your computer, what are your preferences, and what network resources you can access when connected to a network.

The user account allows you to authenticate to Windows or any other operating system so that you are granted authorization to use them. Multi-user operating systems such as Windows don’t allow a user to use them without having a user account.

The longer a network is in place and functioning properly, the more your organization might want to expand its features and services. Initially, you can increase network population by adding new hosts and expanding network services by providing additional shared software. But eventually, a single network will expand to the point where it can no longer operate efficiently. That is when it must enter the fourth phase of the network administration cycle: expansion.

Several options are available for expanding your network:

• Setting up a new network and connecting it to the existing network using a machine functioning as a router, thus creating an internetwork
• Configuring machines in users’ homes or in remote office sites and enabling these machines to connect over telephone lines to your network
• Connecting your network to the Internet, thus enabling users on your network to retrieve information from other systems throughout the world
• Configuring UUCP communications, enabling users to exchange files and electronic mail with remote machines

The third phase of network administration consists of ongoing tasks that typically constitute the bulk of your responsibilities. They might include:

• Adding new host machines to the network
• Administering network security
• Administering network services, such as NFS^TMservices, name services, and electronic mail
• Troubleshooting network problems