How to Create a Local Account on Windows Server 2019
Setting up a local account on Windows Server 2019 can be a straightforward process, but it’s an essential task for system administrators who need to provide access to users without connecting to a domain. Whether it’s for a standalone server or a testing environment, creating a local account ensures that users have the necessary permissions to perform specific tasks without compromising security.
In this article, we’ll walk you through a step-by-step guide on how to create a local account on windows server 2019 on Windows Server 2019, covering both the graphical user interface (GUI) and command-line methods. Additionally, we’ll highlight best practices to keep in mind when managing local accounts.
Why Create a Local Account?
Local accounts are user accounts that are specific to a particular server. Unlike domain accounts managed by Active Directory, local accounts exist only on the server where they are created. Here are a few reasons why you might need to create a local account:
Standalone Servers: When the server is not part of a domain, local accounts are the only way to grant access.
Testing and Development: Developers may need local accounts for testing applications in an isolated environment.
Limited Access: Local accounts can restrict a user’s access to a single server, enhancing security.
Method 1: Using the Graphical User Interface (GUI)
The GUI method is user-friendly and ideal for administrators who prefer a visual approach. Follow these steps:
Step 1: Open Server Manager
Log in to your Windows Server 2019 system with an account that has administrative privileges.
Launch the Server Manager from the Start menu or by clicking the Server Manager icon in the taskbar.
Step 2: Access Computer Management
In Server Manager, click on Tools in the upper-right corner.
From the dropdown menu, select Computer Management to open the Computer Management console.
Step 3: Navigate to Local Users and Groups
In the Computer Management console, expand Local Users and Groups on the left-hand side.
Click on Users to view all existing local user accounts.
Step 4: Create a New User
Right-click on the Users folder and select New User from the context menu.
Fill in the following fields in the New User dialog box:
User Name: Enter the username for the new account.
Full Name: (Optional) Provide the user’s full name for easier identification.
Description: Add a description to indicate the purpose of the account.
Password: Enter a strong password for the account.
Confirm Password: Re-enter the password to confirm.
Select or deselect the following options based on your requirements:
User must change password at next logon (recommended for first-time users).
User cannot change password.
Password never expires.
Account is disabled (useful for accounts not in immediate use).
Click Create to finalize the account creation, and then click Close.
Step 5: Assign Permissions (If Necessary)
To grant specific permissions, add the user to a group:
Right-click the new account and select Properties.
Go to the Member Of tab and click Add.
Enter the group name (e.g., Administrators, Remote Desktop Users) and click OK.
Method 2: Using the Command Line
For administrators who prefer the command-line interface (CLI), this method offers a quick and efficient way to create local accounts. Here’s how:
Step 1: Open Command Prompt or PowerShell
Log in to the server with an account that has administrative privileges.
Open Command Prompt or PowerShell as an administrator. To do this, right-click the Start button, select Windows PowerShell (Admin) or Command Prompt (Admin).
Step 2: Use the Net User Command
Type the following command to create a new user account: net user [username] [password] /add Replace [username] with the desired username and [password] with a strong password. Example: net user TestUser P@ssw0rd123 /add
Press Enter to execute the command. You should see a confirmation message indicating the account was created successfully.
Best Practices for Managing Local Accounts
Use Strong Passwords: Ensure all local accounts have complex passwords to reduce the risk of unauthorized access.
Restrict Administrative Privileges: Only assign administrative rights to accounts that absolutely require them.
Audit Account Activity: Regularly review account usage and disable or delete accounts that are no longer needed.
Enable Account Lockout Policies: Protect against brute-force attacks by setting lockout thresholds for failed login attempts.
Conclusion
Creating a local account on how to create a local account on windows server 2019 is a fundamental task for administrators, providing a secure way to manage access on standalone servers or specific environments. Whether you prefer the GUI or command-line method, this guide equips you with the tools to efficiently set up and manage local accounts. By following best practices, you can ensure that your server remains secure while meeting user access needs.