So far our site has only 2 users i.e 'adam' who is the first user (supreme rights, can go everywhere, do anything) and our second user 'eve' (superuser created by first user Adam. Eve is the active user and Adam acts as backup in case of site failure,etc).

Normal login users are known as 'authenticated user'. We grant access to this group of users via the 'access control' panel.

Before we start, however, there are 3 options for basic user settings:-
(1) users cannot create account on their own. Only site administrator can create account for user.
(2) users can create own accounts without any prior approval.
(3) users can create own accounts but pending site administrator's approval. [In our illustration, we select this option]

Go to http://www.my_domain_com

Login 'eve' and password.

Select > Administer > User management > User settings

(continue) > [Public registrations, change to] Visitors can create accounts but adminsitrator approval is required > [scroll down] > [Body of welcome e-mail (awaitting admin approval), enter text] Hasta la vista

(continue) > Save configuration > Log out

Let say visitor 'Sam' checks out our website and selects 'Create new account'.

An email will be sent to his email account, providing him with the one-time password and user name but 'Your application ... is currently pending approval'

As site administrator, we also receive an email to inform us that someone has registered for an account. This email is sent to us at the email we inserted for the 'Site Information' section, i.e 'Name: My_Domain.com'; 'E-mail address: admin@my_domain.com'.

So we go to:-
http://www.my_domain.com/webmail

Login username (full): admin@my_domain.com and password

and checkout the mail.

Please note: In the images above, you can see the user (sam) is number '6'. For our illustration, consider user 3, 4 and 5 are spammers, and we have deleted their accounts.
So we actually have 3 users if you have followed the tutorial to this stage i.e user 1 (adam), user 2 (eve) and user 6 (sam).

So we go to our website and activate Sam's account (which is currently 'blocked').

Go to http://www.my_domain.com

Login 'eve' and password

Select > User management > Users > [Username] > [sam] edit > [scroll down] > [Status,change to] Active

(continue) > Submit > Log out

We have to send an email to Sam to inform him that his account has been activated.

Sam goes to our site and logins.

Go to http://www.my_domain.com

Login 'sam' and password (as given in the email)

Select > My account > Edit > [Password] xxxxxxx > [Confirm password] xxxxxxx

(continue) > Submit.

Notice: Sam does not have a 'Create content' link. We did not grant him access to create any type of content.

In the next lesson, we shall enable the 'blog' module and grant Sam access to create content via this module.