At IU, in Windows, how do I give myself or other users login privileges on my computer?

At Indiana University, to give yourself or other users login privileges on your computer in Windows 7, Vista, or XP Professional, you must first set up your computer to join the IU ADS domain; see At IU, in Windows 7, Vista, or XP Professional, how do I configure my computer to connect to IU's Active Directory Services domain?

After you've added your computer to the domain, you can add any user who belongs either to that computer's domain or to a domain that has a trust relationship with your computer's domain.

To add a domain user as a user on your computer:

1. Log in as an administrator or as a user in the local Administrators group.

   Note: At Indiana University, the University Information Security Office (UISO) recommends that you normally refrain from running your Windows computer as an administrator. For more, see What is the principle of least privilege?

2. From the Start menu, select Control Panel, or Settings and then Control Panel.
   
   
3. Open User Accounts. In Windows 7 and Vista, click Manage User Accounts, and then click Add; in Windows XP, click Add.
   
   
4. To locate the account, click Browse and select the account when you find it. If you know the account you want to add, type the username, and enter ADS as the domain.
   
   
5. The account receives Standard user rights by default. In Windows 7, this is the only option. In Windows Vista and XP, choose the Restricted set of permissions. (This adds the user to the regular Users Group.)
   
   
6. Click Finish. ADS accounts added in this manner will appear in the list of user accounts. Users in the list of user accounts will be able to log into your computer using their IU ADS username and password.

Comments/Questions/Corrections