Franske ITC-2000 Security Lab

Manage Windows Users and Groups

1. Open the "Computer Management" control panel
2. Click on the "Users" option under "Local Users and Groups"
3. You should now see a listing of all users on your system in the right hand pane of the window.
4. One way that attackers may exploit your system is by using account credentials which you are not in need of. One such example is the default "Guest" account.
   1. To disable this account right click on the account name and choose properties.
   2. Place a check mark nets to the "Account is disabled" option
   3. Click the "OK" button
   4. Notice that the Guest account icon is now different than active accounts on the system
5. Create a new user account through the computer management window
   1. Right click on an open area in the user listing pane of the window and select "New User..."
   2. Create a new user with "ITC Limited" as the username and full name.
   3. Set the password for the user to "Password01!!"
   4. Make sure that the "User must change password at next login" box is unchecked and the "Password never expires" box is checked.
   5. Click "Create"
6. Create a new group through the computer management window
   1. Click on the "Groups" option under "Local Users and Groups" in the left side pane of the window
   2. Right click on an open area in the group listing pane of the window and select "New Group..."
   3. Create a new group named "ITC Limited"
   4. Click the "Add..." button and enter the user name "ITC Limited" and click "OK" to add the ITC Limited user to the new group
   5. Click the "Create" button to create the group
7. Open the "Users" group by double clicking on the group name
8. Notice that the ITC Limited user is automatically added as a member of this group as well.
9. Click "Cancel" to close the Users group window.
10. Close the computer management window