Week 3 Laboratory: User Management and Permissions in Windows
Objective:
Students will learn how to manage user accounts and groups, and assign permissions to files
and folders in Windows using both graphical and command-line interfaces. By the end of this
activity, students will be able to create, modify, and delete users and groups, as well as assign
permissions to different user groups.
Lab Setup:
1. Operating System: Windows 10 or later.
2. Required Tools:
○ Command Prompt with Administrator privileges.
○ Access to the Local Users and Groups tool (lusrmgr.msc).
○ A folder created on the system for testing permissions (e.g., C:\LabFiles).
Task 1: Creating Users via Command Prompt
Step 1: Open Command Prompt as Administrator.
○ Search for cmd in the Start menu, right-click, and select Run as administrator.
Step 2: Create two users (student1 and student2):
bash
Copy code
net user student1 password123 /add
net user student2 password456 /add
Step 3: Verify the users were created:
bash
Copy code
net user student1
net user student2
Task 2: Creating User Groups and Adding Users to Groups
Step 1: Create a group called "LabGroup":
bash
Copy code
net localgroup LabGroup /add
Step 2: Add both users (student1 and student2) to "LabGroup":
bash
Copy code
net localgroup LabGroup student1 /add
net localgroup LabGroup student2 /add
Step 3: Verify that the users were added to the group:
bash
Copy code
net localgroup LabGroup
Task 3: Setting Folder Permissions for the Group
Step 1: Create a folder called "C:\LabFiles":
○ Use File Explorer or:
bash
Copy code
mkdir C:\LabFiles
Step 2: Assign full control of the "C:\LabFiles" folder to the group "LabGroup":
bash
Copy code
icacls "C:\LabFiles" /grant LabGroup:F
Step 3: Verify that the group has the correct permissions on the folder:
bash
Copy code
icacls "C:\LabFiles"
Task 4: Modifying and Testing User Permissions
Step 1: Remove write permissions for student2 on the "C:\LabFiles" folder:
bash
Copy code
icacls "C:\LabFiles" /deny student2:W
Step 2: Test the permissions:
○ Log in as student2 and try to create a file in the "C:\LabFiles" folder. They
should be denied access.
○ Log in as student1 and create a file in the "C:\LabFiles" folder, which should
succeed.
Task 5: Deleting Users and Groups
Step 1: Remove the users from the group:
bash
Copy code
net localgroup LabGroup student1 /delete
net localgroup LabGroup student2 /delete
Step 2: Delete the users:
bash
Copy code
net user student1 /delete
net user student2 /delete
Step 3: Delete the group:
bash
Copy code
net localgroup LabGroup /delete
