CIM user accounts

[Ray McIntosh]

Is there any way to get CIM7 to authorise users against group membership rather than having to re-register all users individually into CIM itself?

E.g. I have a AD group called DOMAIN\ISadmins that all our administrators are a member of... can CIM7 verify that a user logging in to CIM is a member of this group rather than me having to individually register the user names of all the admins?

[Brent Ingler]

I don't know about AD groups, but I know it's possible with NT4 domains, as we've already done that. Just make sure that the domain name you're using doesn't contain any special characters. For some reason, CIM doesn't like them.

Anyway, to add them, just go into Settings, Accounts, and browse for the domain name, and then you can browse for the groups or users, or type them in manually.

Brent

[Ray McIntosh]

Tried that, but there seems to be no ability to browse for groups, only users.

[Brent Ingler]

I just checked on my server, and you're right. You just need to type in the group name, manually.

Brent

[Gordon_16]

I'm looking to utilize AD Groups when assigning user in CIM Does this work in your environmemt. If so can you show me the syntex you used.


Thanks

[Derek Brawders]

I have attempted this and it does not validate the person who is in the group that I have specified in CIM7.
No special characters in the group or the domain name. Group I created is an NT4 global group.
Any thoughts?

[Brent Ingler]

CIM7 actually does not allow group membership access. As it's currently set up, you have to add individual users. You're able to add the groups, as indicated above, but it has no effect on the users who are able to log in.

Brent

[Derek Brawders]

Are there any plans in the future to allow this type of access that you are aware of?
Thanks!

[Darrin Rawls]

Unfortunately, no immediate plans. Turns out this is a limitation to the OS dll we use to authenticate users.