Windows 2000 Administration in a Nutshell

Name

built-in user account

Synopsis

A special user account created during installation of Windows 2000 Server.

Description

Two default user accounts are created during installation of Windows 2000 Server. These accounts are called built-in user accounts, and they can be renamed but not deleted. The accounts are:

Administrator

An account that has full administrative rights for the domain or computer.

Guest

An account used to grant temporary access to network resources in the domain or computer. This account is disabled by default and should be enabled only when needed.

On a member server or client computer, the Administrator and Guest accounts are local user accounts and are stored in the local security database. For example, the Administrator account on a member server has full administrative rights on that member server (and no rights on any other computer in the network). On a domain controller, however, these accounts are domain user accounts and are stored in Active Directory. The Administrator account on a domain controller thus has full rights on every computer in the domain.

Depending on which optional components of Windows 2000 Server are installed, there may be other built-in user accounts. Table 3.8 lists and describes the most common of these accounts.

Table 3-8. Optional Built-in User Accounts

Account	Name	Description
Internet Guest Account	IUSR_<computername>	Used by Internet Information Services (IIS) to provide anonymous users with access to IIS resources
Launch IIS ...