Manage Local User Accounts

This virtual lab guides learners to the Microsoft PowerShell Local Account Management Commands Module and introduces how to create and manage local users and groups. Hands-on experience with user and group accounts benefit Network Operations Specialist, Network Analyst, System Administrator, Network Engineer to be effective in their jobs.

45 minutes
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *

Already have an account? Sign In »


In working through this 45-minute lab, you administer user and group accounts in Windows PowerShell. You require Microsoft Remote Desktop to launch your lab environment on an Apple machine. Lab exercises guide you using PowerShell commands to display local account management information, create a local user, edit a user description, create a local group, and add a local user to a group through PowerShell.

You launch the PowerShell application on a virtual machine, LabVM, provisioned in Azure. The provisioning can take between five to ten minutes. Once LabVM’s state says running, then you may proceed with the lab exercises. You receive a notification, in the lab interface, that the virtual machine creation has completed.

If you have used a Windows Operating System to find and open applications, you have the necessary preparation for the virtual lab. Understanding of Windows networking, user, and group concepts serves you well in moving efficiently through this hands-on experience. Ensure that you have a full hour to complete all the lab sections, as you cannot return to your work.

This lab enhances skills understanding and using Powershell and the power of using groups to manage users. Information Technology positions that handle networking or administration must have this fundamental knowledge.

Understanding the Scenario:

In this lab, you take the role of a system administrator for a company that needs to manage local users and groups on a large number of servers. In preparation for this process, you need to determine which commands are required to create and modify users and groups on a single server. You use Windows PowerShell to create and then modify a user. Next, you use Windows PowerShell to create a group and add a user to the group. Finally, you check account creation.

Configure Your Environment:

You sign into Microsoft Azure to access your LabVM, pre-provisioned for you. You need to make sure the virtual machine finishes booting up before connecting. Then you connect to LabVM through Remote Desktop Protocol (RDP). Finally, in this exercise, you launch Windows PowerShell as an administrator and create a directory for your lab work. All the other lab modules require the successful completion of this one.

Display the Local Account Management Commands:

This lab portion introduces PowerShell modules and all the commands available through the Local Accounts Management Commands Module. You learn the Get-Module and Get-Command functions to obtain information on how to use PowerShell user and group management capabilities for future troubleshooting.

Create A Local User:

You discover how to display information about the local users and create a user through the New-LocalUser command—doing both parts of this lab module teaches you how to verify if a user exists as expected.

Modify the Description of LabUserOne:

You edit user properties during this lab exercise. You display information about a particular user and modify the description field. You see that doing these steps, for many users on hundreds of servers, would be inefficient, and it would be better to create a local group.

Create a Local Group:

Local groups allow you to manage thousands of users better with less effort. In this lab portion, you make, display, and edit a local group, using PowerShell commands. Now you have a way to manage many users across many machines. You need to know how to assign users to groups.

Add a Local User to a Local Group:

You check which users have a membership to a local group and add the user you previously created to the group. Now you have a way to keep track of users and manage their access.


In this challenge, you used Windows PowerShell to accomplish the following:

  • Display local account management commands.
  • Create a local user.
  • Modify a local user.
  • Create and modify a local group.
  • Add the user to the group.

Also, you have a list of Microsoft.PowerShell.LocalAccounts commands to further explore and leverage in PowerShell.