System Management Homepage 2.0 User Groups

[James Simon_1]

I have recently upgraded to Systems Management Homepage v2.0 running on Windows 2003. At this point I am only able to logon to the homepage with accounts local to each server (e.g local administrator). Is there anyway to grant a domain user access to the homes page?

Also, is it possible to remove the default permissions that the local admin group has to the homepage?

Thanks

James Simon

[Darren Z · Accepted solution]

If you want to log in with a Domain account, try putting in the domain name \ the user name. For example:

Local Account Login:
User: myusername
Password: mypassword

Domain Account Login:
User: domainname\myusername
Password: mypassword

Obviously the Domain User Group will need to be apart of the Local Administrators group on the local machine.

[James Simon_1]

Darren thanks for the tip on the logons. Do you happen to have any idea on how to disable the local admin group from having amdin rights to the system management homepage?

[Darren Z]

I am 99% positive you cannot remove the local admin group from accessing the System Management Homepage.

In fact, if you log into the System Management Homepage and go to: settings -> system management homepage -> security ->user groups there is a message about this:

"The appropriate default user group (Administrators for Microsoft operating systems and root for Linux) always has administrative access."

[James Simon_1]

Darrens response took care of the more major of the two issues. I can live with users being able to directly access the system management homepage for now.

[Stoecklin Michel]

Darren,

If I'm not wrong, per default, all members from local administrator group as access as admin, but how can you define access for operator or user. Affecting the right as user to the local group Users, and trying to connect as domain\username doesn't work ???

If all people wo want access as to be member of the local Administrator group, they will be per default administrator of the machine meaning big security hole !!!

[Haridas]

Michel,

Darren,

If I'm not wrong, per default, all members from local administrator group as access as admin, but how can you define access for operator or user. Affecting the right as user to the local group Users, and trying to connect as domain\username doesn't work ???

If all people wo want access as to be member of the local Administrator group, they will be per default administrator of the machine meaning big security hole !!!


Create a usergroup for ex "smhoperators" in the OS. Add all the users who you think should be given only operator access, to this new group.

Similarly, "smhadmins" group for admin rights and "smhusers" for user rights. Add users appropriately.

Login to System Management Homepage as administrator. Go to "Settings->Security->user groups". Enter "smhadmins" in administrator group, "smhoperator" in operator group, and "smhusers" in users group. Save the configuration.

This way, You need not make all the members as part of local administrators.

For domain users, You have to prefix the groupname / username with the domain name.

for ex. in usergroups page, you have to add mydomain/smhadmins instead of just "smhadmins". Then Login as "mydomain/myadmin". Same thing applies for operators and users.

[Haridas]

Michel,

Create a usergroup for ex "smhoperators" in the OS. Add all the users who you think should be given only operator access, to this new group.

Similarly, "smhadmins" group for admin rights and "smhusers" for user rights. Add users appropriately.

Login to System Management Homepage as administrator. Go to "Settings->Security->user groups". Enter "smhadmins" in administrator group, "smhoperator" in operator group, and "smhusers" in users group. Save the configuration.

This way, You need not make all the members as part of local administrators.

For domain users, You have to prefix the groupname / username with the domain name.

for ex. in usergroups page, you have to add mydomain/smhadmins instead of just "smhadmins". Then Login as "mydomain/myadmin". Same thing applies for operators and users.