Microsoft 4.5.X User Manual
Page 51 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
•
Allow Web Logon – This access right allows members of the specified group to log
onto the Account Reset Console through the web interface.
onto the Account Reset Console through the web interface.
o
If the Account Reset Console is configured to allow them to change their own
passwords, users will have this option once they log in.
o
If the Account Reset Console is configured to allow users to recover passwords
through an ID verification process, and there are questions that users need to
specify answers for, users will be allowed to set or change their answers once
they log in.
specify answers for, users will be allowed to set or change their answers once
they log in.
•
Allow Reset of Other Users’ Accounts – This access right allows members of the
specified group to reset other users’ accounts once they log in. Examples of groups
who should have this access right might be help desk users or network administrators.
specified group to reset other users’ accounts once they log in. Examples of groups
who should have this access right might be help desk users or network administrators.
o
Groups with this access right must still be granted group access rights to
manage specific groups. For more information, see “Set Group Access Rights”,
below.
below.
•
View Console Logs and Task Reports – This access right allows members of the
specified group to schedule tasks, view the Account Reset Console logs, and view the
reports generated by scheduled tasks.
specified group to schedule tasks, view the Account Reset Console logs, and view the
reports generated by scheduled tasks.
•
Manage All Web Access Controls – This access right allows members of the
specified group to manage the application’s day-to-day functions.
specified group to manage the application’s day-to-day functions.
o
Users with this access right can set program and group access rights for other
windows groups.
o
Users with this access right can configure the program features for account
reset and password change.
o
Users with this access right can view the system logs.
o
Users with this access right can configure the Account Reset Console’s
appearance.
Adding Access Rights
To grant program access rights to a Windows group, check the desired access rights, select
the domain or local machine as appropriate, enter the name of the group in the edit box, and
click “Add Rule”. This will grant the selected program access rights to the specified group.
You will see the list of existing access rights change to include the new rights.
the domain or local machine as appropriate, enter the name of the group in the edit box, and
click “Add Rule”. This will grant the selected program access rights to the specified group.
You will see the list of existing access rights change to include the new rights.
Viewing or Deleting Existing Access Rights
The existing group program access rights are listed at the bottom of the page. Any group can
be deleted from a given rights list by clicking the “[del]” link next to its name. Deleting a group
from any particular rights list removes those rights from the group.
be deleted from a given rights list by clicking the “[del]” link next to its name. Deleting a group
from any particular rights list removes those rights from the group.
Permission “Stacking”
Each permission level bestows a specific set of capabilities upon the group. It is
important to note that these are not inclusive! For example, a group with “Allow Reset
of Other Users’ Accounts” but not “Allow Web Login” will not be able to log into the
Account Reset Console!
important to note that these are not inclusive! For example, a group with “Allow Reset
of Other Users’ Accounts” but not “Allow Web Login” will not be able to log into the
Account Reset Console!