User Profiles

1
User Profiles

• Collections of desktop and environmental
  configurations on a Windows XP system for a
  specific user or group or users

2
User Profile Contents

• Application Data
• Cookies
• Desktop
• Favorites
• Local Settings
• My Documents
• NetHood
• PrintHood

• Recent
• SentTo
• Start Menu
• Templates
• NTUSER.DAT
• NTUSER.DAT.LOG
• NTUSER.INI

3
User Profiles
4
Local Profiles

• Sets of specifications and preferences for
  individual users, stored on a local machine
• Established by default for each user who logs
  into a particular machine
• Reside in the username subdirectory beneath the
  \Documents and Settings directory
• Windows XP Professional local users (including
  imported users) only have local profiles

5
Ways to Create a User Profile

• Creating Profiles
• Log off of your account.
• Log on as Student.
• Change Wall Paper
• Change Appearance
• Screen Saver
• Shortcut to Wordpad
• Log off of Student.
• Log onto your account (this should be an
  Administrator account).
• Go to C drive.
• New Folder -gt Profiles
• Share the Profiles folder.

6
Ways to Create a User Profile

• Go to System -gt Properties -gt Advanced -gt User
  Profiles and Settings
• Select student profile.
• Choose Copy To and copy to C\Profiles.
• Permit to Use choose Change
• Select User or Groups
• Click Advanced
• Choose Everyone.
• Close out of System.

7
Ways to Create a User Profile

• Go to Windows Explorer.
• See Profiles folder
• Tools-gtFolder Options
• View -gt Show Hidden Files and Folders
• Clear Hide extensions for know file types
• Rename ntuser.dat to ntuser.man (to create a
  mandatory user profile).
• Go to mmc -gt Add Snap-in. Add Local Users and
  Groups.
• Right click on student. Choose properties.
• Click on Profiles.
• Specify location of profile.
• Need network path to profile \\winxp\Profiles.
• Log off of your account.
• Log onto student. Make some changes. Log off.
  They should not be retained.

8
Roaming Profiles

• Reside on a network server to make it broadly
  accessible
• When a user with a roaming profile logs into any
  Windows XP system on the network, that profile is
  automatically downloaded when the user logs on

9
Local Security Policy

• Centralized control mechanism which governs
• Password
• Account lockout
• Audit
• User rights
• Security options
• Public key
• IP security

10
Group Policies

• MMC snap-ins used to specify users desktop
  settings
• Exist for local computers, groups, domains, and
  organizational units (OUs)
• Only a local computer group policy can be managed
  from a Windows XP Professional system (others can
  be managed from Windows XP Server)

11
Order of Application of Group Policies

• Priority
• Existing legacy Windows NT 4.0 NTCONFIG.POL
• Unique local group policy
• Site group policies
• Domain group policies
• OU group policies
• Contradictory settings in later policies override
  settings of former policies
• Effective policy cumulative result of this
  priority application of group policy

12
Local Security Policy Tool

• Used to edit the local group policy on a Windows
  XP Professional system
• Accessed from Administrative Tools applet from
  Control Panel

13
Password Policy

• Defines restrictions on passwords
• Length
• Age
• Minimum Age time elapsed between password
  changes
• Maximum Age time before you can change a
  password
• History

14
Password Policy
15
Password Policy Items
16
Account Lockout Policy

• Defines conditions that result in a user account
  being locked out
• Used to prevent brute force attacks against user
  accounts
• Account lockout policy items
• Account lockout counter
• Account lockout duration
• Reset account lockout counter after

17
Disable CTRLALTDEL Policy
18
Disable CTRLALTDEL Policy
19
Audit Policy

• Defines events that are recorded in Security log
  of Event Viewer
• Configured in Audit Policy dialog box
• Used to track use and misuse of resources

20
Audit Policy Items

• Audit account logon events
• Audit account management
• Audit directory service access
• Audit logon events
• Audit object access
• Audit policy change
• Audit privilege use
• Audit process tracking
• Audit system events

21
Audit Policy
22
User Rights Policy

• Defines which groups or users can perform
  specific privileged actions

23
User Rights Policy Items

• Access this computer from network
• Act as part of the OS
• Add workstation to domain
• Back up files and directories
• Bypass traverse checking
• Change system time

• Create a pagefile
• Create a token object
• Create permanent shared objects
• Debug programs
• Deny access to this computer from network
• Deny logon as batch job

24
User Rights Policy Items

• Deny logon as a service
• Deny logon locally
• Enable computer and user accounts to be trusted
  for delegation
• Force shutdown from a remote system
• Generate security audits

• Increase quotas
• Increase scheduling priority
• Load and unload device drivers
• Lock pages in memory
• Log on as a batch job
• Log on as a service
• Log on locally

25
User Rights Policy Items

• Manage auditing and security log
• Modify firmware environment values
• Profile single process
• Profile system performance
• Remove computer from docking station

• Replace a process level token
• Restore files and directories
• Shut down the system
• Synchronize directory service data
• Take ownership of files or other objects

26
User Rights Policy
27
Security Options

• Define and control various security features,
  functions, and controls of the Windows XP
  environment

28
Security Options
29
Security Options Policy Items
30
(No Transcript)