Enable Privileges for Domain Groups

Managing Your Installation

By default, the person who logs in to the Control Center computer has full Administrator access to Control Center functions. If you have a managed domain with a network Group Policy in place, you can set up domain groups to restrict users from using specific Control Center views (Manage Computers, Configure Computers, Monitor Users/Computers).

To do this, you need to (a) create the Spector CNE pre-configured Domain Groups listed below on your network and (b) enable privileges for domain groups in the Control Center. When these settings are in place, a Control Center user MUST be a member of the appropriate domain group to use Control Center functionality.

Creating Domain Groups

First, create the Security Groups listed below on the domain. Because the groups are pre-configured in Spector CNE, the names you use must match those given below exactly.

To create domain groups:

1. On the Domain Controller computer, open the Active Directory Users and Groups item.

2. Create the following Security Groups. The group names are "hard-coded," so you must use the exact spelling, case, and spaces for each, or Spector CNE will not detect their presence:

Spector CNE Admins
Privilege to use ALL Control Center functions. This group the same privileges as a Domain Administrator. You do NOT need to add Admins users to the other domain groups, since Admins have full access privileges.

Spector CNE Managers
Privilege to use all functions in the Manage Computers view. Users in this group can manage lists of computers, pre-configure clients using the Deployment Utility, and remotely install and uninstall Clients.

Spector CNE Configurers
Privilege to use all functions in the Configure Computers view. Users in this group can remotely turn recording on/off and change Client settings.  

Spector CNE Monitors
Privilege to use the Monitor Computers or Monitor Users view to retrieve and review Client recordings.  Make sure only qualified managers are able to view Client recordings. To further limit a "Monitor's" access to User or Computer folders in the Data Vault, use "Share" permissions. See Sharing Data Vault Folders.

PowerUsers
All Control Center users. Contains all other Groups (Admins, Managers, Configurers, Monitors) allowing the Control Center to be a Client Administrator and access information about the Client.  This group should have Administrator-level access to all Client computers.

3. Add the Spector CNE Admins, Spector CNE Managers, and Spector CNE Configurers groups as members of the PowerUsers group.

4. Add specific Control Center users as members of each group, as appropriate.

Enable Group Privileges

To use restrictions based on group policy, you need to enable the feature in the Control Center. If you create domain groups without changing this setting, there will be no change in user access to the Control Center.

To turn on the domain group privileges:

1. Right-click on Control Center in the left navigation pane and select Properties. The Control Center Properties box opens.

2. Select the Security tab.

3. Under "Privileges," click to check Enable Privileges for Domain Groups.