local and domain users question

[Guest]

Today my laptop isn't part of a domain. But in the near future I'll setup my
server as a domain controller (AD).
I have 3 questions:
1. Is it advisable for the time being (until my server is setup as domain
controller) to create a local user account, and remove it after the domain
server is up?
2. When connecting to a domain does the system creates also a local user
(because at times your working standalone you can also work with the domain
user)?
3. Is it advisable to rename the Administrator account that is originally
created to something else, as well as creating a supplementary eg localadmin
account on the laptop?

thanks for any help.

 

[Guest]

1. Yes. If the domain logon fails, you need to be able to logon locally.

One of the issues you will meet is that as a new domain-member user you will
be given a copy of the Default Profile, instead of your local account. This
could be very frustrating! There are workarounds, but basically you'll be
starting from scratch with NO documents visible, and all your software
defaulted.

2. No it doesn't. When away from the network it is still possible to logon
as the domain-member user, because the password is cached.

The limitation here is that if the password expires whilst you are
on-location, then you are unable to use the computer until you can connect to
the domain-controller again. Hence it's advisable to have a local account.

3. No, but you should make sure the local Administrator password is
different from the domain-Administrator password, having them the same
creates a security hole.

 

[Guest]

Thanks for the info.

Are there any best practices as how to name the local account?
I suppose its not the purpose to make the new to be created local account
member of the Administrators group?
I saw also in a company i did a project, they renamed the local
Administrator user into localadmin, is this also good practice, or as you
mentioned is isn't necessary to rename the local Administrator user, of
course when using strong passwords?

 

[Guest]

One extra question:

when creating a local user, should this user also have access to POP3 email
or exchange via Outlook, or should only the domain user have this email
access?