IT Knowledge Base

Create Groups
# group add finance
# group add development
# group add others

Create User and Assign to Groups
# useradd –m –g finance –G development,others –s /bin/csh testuser

Information about a User
# id testuser
# groups testuser

Modify and Delete a User
# usermod testuser
# userdel –r testuser

Deactivate User Account
# usermod –L testuser

Switch to a user and move to home directory
# su – testuser

Set a Password for a User
# passwd testuser

Set Password Policies
# chage testuser

User, Groups and Password Database
# /etc/passwd
# /etc/groups
# /etc/shadow

Template Directory for Home Folder
# /etc/skel/

I didn’t know before that actually every authenticated user can add up to 10 computers to the domain  by default. This is a security issue and should be prevented.

Follow the steps to do so:
1. Open ADSI Editor
2. Click with the right mouse button on ADSI Editor and make a default connection
3. Click with the right mouse button on the domain / properties
4. Change the value for ms-DS-MachineAccountQuota to 0

When somebody adds a computer to the domain it usually goes into the CN=Computers,DC=Domain. If you want to choose another OU as the default container, you can do this with the redircmp “DN of the OU”.
By the way you can do the same for the users with the command redirusr “DN of the OU”.