Understanding user accounts in Windows Small Business Server 2011 Essentials

Published: April 26, 2010

Updated: March 30, 2011

Applies To: Windows Small Business Server 2011 Essentials

A user account provides important information to Windows SBS 2011 Essentials, which enables individuals to access information that is stored on the server, and makes it possible for individual users to create and manage their own files and settings. Users can log on to any computer on the network if they have a Windows SBS 2011 Essentials user account and have permissions to access a computer. Each person accesses his or her user account with a user name and password.

There are two main types of user accounts. Each type gives users a different level of control over the computer:

  • Standard accounts are for everyday computing. The standard account helps protect your network by preventing users from making changes that affect other users, such as deleting certain files, or changing network settings.

  • Administrator accounts provide the most control over a computer network. You should assign the administrator account type only when necessary.

Additionally, Windows SBS 2011 Essentials creates a Guest user account, which is intended primarily for people who need temporary use of a computer. By default, the account is deactivated and the password is blank. The Guest account can be used as a convenient way to turn on access to resources that are stored on your server (such as photos and music) for someone who is not a regularly using the home server. You can activate the Guest account to share files with your extended family (such as grandparents) and friends. Use the Guest account for temporary access to resources on the server and deactivate the Guest account when the guest no longer requires access to the resources on the server. By default, the Guest account, when activated has Read only access. It is recommended that you think about what level of access to the server folders should be provided to the Guest account, whether Read/Write access is required, or if a Read only access is sufficient. These considerations will provide maximum protection and privacy to your data. For more information about setting access to server folders, see How do I manage access to server folders?

If you provide read/write access to the Guest account for a server folder, then anyone who accesses the server folder using the Guest account can delete, change or add files that are located in that folder.

For information about how to create and manage user accounts, see “Managing user accounts in Windows Small Business Server 2011 Essentials.”