Microsoft 4.5.X Manual De Usuario
Page 53 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
members of the “can reset” group are permitted to reset accounts of users in the “can be reset“
group.
group.
It is important to note that there are two different types of Group Access Rights:
•
Reset Password – Granting an Administrative Group Reset Password rights allows the
members of the Administrative Group to reset the accounts and passwords of users
that are members of the Managed Group.
members of the Administrative Group to reset the accounts and passwords of users
that are members of the Managed Group.
•
View User Answers – Granting an Administrative Group View User Answers rights
allows the members of the Administrative Group to view the user identity information
(i.e. identification answers) of users that are members of the Managed Group.
allows the members of the Administrative Group to view the user identity information
(i.e. identification answers) of users that are members of the Managed Group.
Adding Access Rights
To grant group access rights to a Windows group, enter the appropriate Administrative Group
and Managed Group, select the appropriate checkboxes, and click “Add Group Access Rule”.
This will grant access rights to the specified group. You will see the list(s) of existing access
rights change to include the new rights.
and Managed Group, select the appropriate checkboxes, and click “Add Group Access Rule”.
This will grant access rights to the specified group. You will see the list(s) of existing access
rights change to include the new rights.
Viewing or Deleting Existing Access Rights
The existing group access rights are listed at the bottom of the page. Any group can be
deleted from a given rights list by clicking the “[del]” link next to its name. Deleting a group from
any particular rights list removes those rights from the group.
deleted from a given rights list by clicking the “[del]” link next to its name. Deleting a group from
any particular rights list removes those rights from the group.
Group Access Permissions
Even though a particular group has been granted access to manage another group,
that does not mean that it will be allowed to reset accounts. The administrative group
must be granted Web Logon and Allow Reset rights under Program Access Rights, or
won’t be able to log onto the Account Reset Console at all!
that does not mean that it will be allowed to reset accounts. The administrative group
must be granted Web Logon and Allow Reset rights under Program Access Rights, or
won’t be able to log onto the Account Reset Console at all!