Reasons to set password expiration policies.

There are several reasons to set up password expiration policies on Windows Server:

• Temporary users.
• Users who are doing study practices in the company.
• Users whose contract expires. Consequently, the administration orders the deactivation of the account in a determined period of time.
• Test users.
• Security controls

Edit password expiration policies with local policies in Windows Server.

The first method we will see is to edit the local directives. With this intention press the Win+R combination and run the following command:

gpedit.msc

Consequently, it follows the following path: Local Computer Policy>Computer Configuration>Windows Settings>Security Settings>Account Policy>Password Policy.

Once there, several configuration parameters are displayed:

• Enforce password history: This parameter allows you to determine how many new passwords are related to a user. Consequently, it avoids assigning a previous password again.
• Maximum password age: Through this option you define the number of days of use of a password. Even before Windows Server requests the change.
• Minimum password age: With this alternative it is possible to define the number of days of duration of the password. Before being modified by the user.
• Minimum password length: It allows you to define the minimum number of characters in the password.
• Minimum password length: It allows you to define the minimum number of characters the password will contain.
• Password must meet complexity requirements: Determines how passwords should be set with complexity parameters. For example, combination of symbols, numbers, capital letters, etc.
• Storage passwords using reversible encryption: This configuration is related to certain applications. In fact, these are protocols that require knowledge of the user’s password for authentication purposes.

Edit password expiration policies with domain policies in Windows Server.

With this in mind, it is necessary to login to the server manager. Once there, please go to the Tools menu. Then click on Group Policy Management.

The following menu will be displayed immediately.

Please display the forest, and then the domain. Once there, right click on Default Domain Policy.

This window will then be displayed.

Please follow the path below: Default Domain Policy>Computer Configuration>Policies>Windows Settings>Security Settings>Account Policies>Password Policies. As you can see, there are the same options as in the local directives. However, the most important difference is the scope of application. That is, by making changes locally, you can’t modify the domain’s directives. On the contrary, from a computer in a domain it is possible to modify the policies. With this intention, double-click on Maximum Password age.

You can see that for security reasons it is set at 42 days. On the contrary, if you set it to 0 then the password will never expire.

In this way we have seen how to configure password expiration policy local or domain mode in Windows Server 2019/2016. This way you increase the security of the system. All right, that’s it for now. Please keep an eye out for updates on Windows Server. Bye!

The post Configure password expiration policy local or domain mode in Windows Server 2019/2016 appeared first on Linux Windows and android Tutorials.

Creating user template from the Server Manager. Generating a new user.

The first thing you have to do is go to the Server Manager. Once there, open the Tools menu and click on Active Directory Users and Computers.

An administration console will be immediately deployed. Please click on Users. Then right-click on an empty space and follow the path below: New>User

Then enter the data of the new user.

On the next screen, please enter the user’s password. It is also possible to configure some general aspects about it. Press Next to continue

Next we will see a summary of the account to be created. Click on Finish to complete the process.

Setting up some aspects of the new user.

With the previous steps, we have created the basic elements of a new user. However, it is possible to configure some more aspects. With this intention, please double-click on the new user. In this opportunity we will see the groups where the new user is. To edit this configuration, please click on the Member of tab. Then click on Add to enter a new group.

Another aspect that you can edit is the time range allowed for user input. With this intention, click on the Account tab and then on Logon Hours

Once there, please edit the time allowed for the Logon. Press OK to continue

Similarly, we can add any other data relevant to the user.

Creating the new user template in Windows Server

Once the new user is created, it is time to generate the template. With this in mind, right-click on the user and then click on Copy.

In the next window, please enter the data of the new user.

Once again, enter the password for the user.

Finally you will see a message confirming that the data was copied from one user to another.

You can check the above, verifying some configuration of the new user. For example, the Logon times.

Conclusion

At the end of the day, we saw how to create user template in Windows Server 2019/2016. This facilitates the process of creating multiple users. In addition, the time saved can be spent on other important tasks for the company. Very good! That’s all for now. Before I say goodbye, I invite you to see our post about backing up and restoring GPO on Windows Server. Bye!

The post How to create user template in Windows Server 2019/2016 appeared first on Linux Windows and android Tutorials.

How to access Active Directory Windows Server 2016 Users and Computers

In the first place it is necessary to go to the users and computers of Active Directory. Since it is in this console where objects, users and other elements of the Domain are stored. For this there are a couple of options:

• Follow the route below: Server Manager>Tools>Active Directory Users and Computers
• Press the Win+R combination and run the command dsa.msc

Immediately the Active Directory users and computers console will be deployed

How to create an organizational unit in Windows Server

It is highly recommended to create an organizational unit within the domain. This will optimize the organization. In addition, it is possible to create a unit for each area of the company. Consequently, the assignment of roles and functions is better managed. With this intention, right-click on the domain and select New>Organizational Unit

In the new window, please assign a name to the new unit. Also, it is possible to check the option to prevent accidental deletion. This will protect the elements stored in the container.

Creating a new user within the organizational unit.

After the previous process, we will see the new organizational unit. Now it is time to create a new user. With this in mind, right-click on the unit and then New>User.

Once there, it is time to establish some parameters of the user to be created. For example, first and last name, account name and the domain. After completing the data, press Next to continue.

Now it’s time to create the password. In addition, it is possible to edit the account properties. For example, password policy and account status. Click Next to continue

Finally, a summary of the values assigned to the new user is displayed. If you agree, press Finish.

Then you can see the new user created within the Organizational Unit.

How to modify new user attributes in Windows Server 2019/2016

Just double-click on the user to edit their properties. That is, you can add or modify aspects such as: email, phone, groups, file association, among others.

At the end of the day we have seen how to create a user in Windows Server 2019/2016 domain controller. This is a valuable tool for system administrators. Since user management is an everyday process in the system. All right, that’s it for now. Before saying goodbye I invite you to see our post about installing IIS on Windows Server. Bye!

The post How to create a user in Windows Server 2019/2016 domain controller appeared first on Linux Windows and android Tutorials.