Working with user accounts

In Delegated Administration Console, administrators can create Microsoft Active Directory user accounts. This enables users to log on to Delegated Administration Console and access the administrative options for which they have privileges. In addition, users must have user accounts before an administrator or customer service representative (CSR) can enable services for them, such as Exchange mailboxes.

A user account consists of a user name and password, which the user provides when logging on to Delegated Administration Console. A user account also includes other information, such as the user's first and last names and e-mail address.

The user name must be unique in the organization to which the user belongs. In addition, for security reasons, all passwords should be strong passwords. Microsoft recommends that passwords:

• Are at least seven characters long
• Do not contain user, company, or other names
• Do not contain a complete dictionary word
• Are significantly different from previous passwords
• Contain a mixture of uppercase letters, lowercase letters, numerals, and keyboard symbols

Important

• Delegated Administration Console user names and SharePoint Team Services user names are not the same. This is important if you plan to provision SharePoint Team Services. Delegated Administration Console user names are Active Directory user principal names (UPNs). SharePoint Team Services user names are security access manager (SAM) account names. Although in many cases, the UPN and SAM user account names are identical, in some instances, they are different. When you create a user account, the SAM user name configured by Microsoft Provisioning System appears under Delegated Administration Console user name on the User Properties page. It is recommended that you make a note of the SAM user name and provide it to users for logging onto the SharePoint Team Services Web site.

Note

• You can use your SAM account name to log onto Delegated Administration Console, but you cannot use your Delegated Administration Console user name, which is the same as your user principal name (UPN), to log onto a SharePoint Team Services Web site.

Administrators can add and delete user accounts, configure user account information, and enable services for a user. Organization CSRs can edit user account information. Users can edit some of their own information, such as their name, address, and telephone number.

For more information about Active Directory user accounts, see the Microsoft Windows 2000 Server product documentation at the Microsoft Web site(http://www.microsoft.com/).

For instructions on setting up a new user account, see To assign roles. For additional user administration procedures, see Delegated Administration Console Help.