How To Create A Local Account On Windows Server 2019

Dianna Russini

3 min read

·

Apr 01, 2025

52

Share

How To Create a Local Account on Windows Server 2019

Creating local user accounts on your Windows Server 2019 machine is crucial for managing access and security. Unlike domain accounts, local accounts are specific to the individual server and don't require a connection to an Active Directory domain. This guide will walk you through the process, covering different methods and essential considerations.

Method 1: Using the Server Manager

This is the most straightforward method, ideal for users familiar with the Server Manager interface.

1. Open Server Manager: Click the Start button and search for "Server Manager." Open the application.

2. Navigate to Local Users and Groups: In Server Manager, click on "Tools" in the top menu bar. Select "Local Users and Groups."

3. Access Users: In the Local Users and Groups console, double-click "Users."

4. Create New User: Right-click in the right pane and select "New User..."

5. Fill in User Information: A new window will appear. Here you will need to provide:

   • User name: Choose a descriptive and easy-to-remember name. Avoid spaces.
   • Full name: Enter the user's full name.
   • Password: Create a strong password that meets your server's password complexity requirements. Important: Remember this password!
   • Confirm password: Re-enter the password for verification.
   • User must change password at next logon: Check this box to force the user to change their password upon their first login. This enhances security.
   • Account is disabled: Leave this unchecked unless you intend to create the account but not enable it immediately.
   • Password never expires: Generally, it's best to leave this unchecked to enforce regular password changes for security.

6. Group Membership: You can assign the user to various groups to define their permissions and access levels. Understanding group policies is vital for managing user access effectively. The default "Users" group grants standard user privileges.

7. Finish: Click "Create" to finalize the account creation. The new local user account is now ready to be used.

Method 2: Using the net user Command in Command Prompt

For experienced users comfortable with the command line, this method offers a faster alternative.

1. Open Command Prompt as Administrator: Search for "cmd," right-click on "Command Prompt," and select "Run as administrator."

2. Execute the net user command: Use the following command structure, replacing placeholders with your desired values:

   net user "NewUserName" "NewPassword" /add
   

   For example: net user "JohnDoe" "P@$wOrd1" /add

3. Set Password Expiry (Optional): Use the following command to manage password expiry:

   net user "NewUserName" * /active:yes  (To activate the account)
   

   This is essential if you initially create the account as inactive. The asterisk (*) prompts the user to change the password at next login.

Important Security Considerations

• Strong Passwords: Enforce strong password policies to protect your server.
• Regular Password Changes: Implement regular password changes to minimize security risks.
• Least Privilege: Grant users only the necessary permissions for their tasks. Avoid granting excessive privileges.
• Account Lockouts: Configure account lockout policies to prevent brute-force attacks.
• Regular Audits: Regularly audit user accounts and permissions to ensure security and identify any unauthorized access.

By following these steps and security best practices, you can effectively manage local user accounts on your Windows Server 2019 system, ensuring efficient administration and robust security. Remember to tailor your approach based on your specific needs and security policies.