Cisco Systems 1.0 (1) User Manual

Cisco Support Tools 1.0 User Guide 

How to Create Support Tools User Groups   39 

Installation Step 2 

Support Tools recognizes two categories of users: 

•  Privileged users have full access to all Support Tools functionality, including tools 

and commands that can be used to modify system settings, registries, etc. 

•  Regular users have limited access to information gathering functionality only. 

Tools capable of system modification are not available to regular Support Tools 

users. 

Support Tools assigns privilege based on regular Windows user groups. This can be 
either a local group you define on the Support Tools Server machine or a domain 

group you define using Active Directory).  

During the Support Tools Server installation, you are prompted to enter the name of 

one (and only one) Windows user group that will serve as the Support Tools 
privileged group. Users in all other groups are treated as regular Support Tools 

users. 

Note: The privileged user group name is case-sensitive. It must match in case its 

corresponding Windows user group name. 

Note: All Support Tools users must be members of the Windows Everyone group; 
anonymous users will not have access to Support Tools. 

After installation, if necessary, you can modify the privileged group name by running 
the Support Tools Server configuration. 

To ensure you have local access to the Support Tools Dashboard in situations when 
network authentication is unavailable (for example, due to a downed network or 

authentication server) it is a good idea to create one or more local user accounts on 
the Support Tools Server.  

To ensure full access to all utilities, these local accounts should be made members of 
a local user group named identically to your Support Tools privileged user group. 

When logging into the Dashboard using a local account, enter 
<hostname>\<Windows_username> 

as your username; for example, 

my_server\my_username

.