Local User Accounts

If your network currently has servers with network operating systems other than Advanced Server, such as LAN Manager, Version 2.x, you can use local user accounts to permit users of these systems to access resources in Advanced Server domains.

Local user accounts cannot be used to log on interactively at a computer running Windows NT Server as a member server or Windows NT Workstation, but in most other ways are just like regular user accounts.

Local user accounts can connect over the network to computers running Advanced Server, Windows NT Server, or Windows NT Workstation. They can be placed in global and local groups and can be assigned resource permissions and user rights. The one exception is that local accounts created in one domain cannot be used in domains that trust that domain — the use of each local account is limited to one domain.

Create and use local accounts in a domain in the following types of situations:

To allow users from other Advanced Server domains to connect to LAN Manager, Version 2.x, servers in this domain.

To allow users whose user accounts are in untrusted domains or domains not running Advanced Server to connect to computers running Advanced Server, Windows NT Server, and Windows NT Workstation in this domain.

Create a local account in the same way that you create regular user accounts, with the exception that while creating the account, use the Account button in the New User dialog box in User Manager for Domains to designate it as a local account.

For information about creating local user accounts, see Chapter 3, "Working With User and Group Accounts."