Enable Privileges for Domain Groups

Control Center Properties

In this topic:

Enabling Group Privileges   

Creating Domain Groups

By default, the person who logs in to the Control Center computer has full Administrator access to Control Center functions. In a managed Domain with a network Group Policy in place, you have the option to restrict access to Control Center functionality. Spector 360 will use pre-configured Domain-Level Groups (with specific names) to limit access to the two levels of Control Center functionality:

Enabling Group Privileges

To turn on the domain group privileges:

  1. Right-click on Control Center in the left navigation pane and select Properties.

  2. In the Control Center Properties box, select the Security tab.

  3. Under "Privileges," click to check Enable Privileges for Domain Groups.

Do not enable this option without creating domain groups on your network as described below, or your login may lose permissions to the Control Center functions!

Creating Domain Groups

To use the group policy function, you can create four (4) Security Groups with specific names. These groups are preconfigured in Spector 360 and the names must match exactly as shown below. All Control Center views will be visible to users in these groups, but the menu items will be grayed out if the user does not have privileges to work in the corresponding view.

To create domain groups:

  1. Open the Active Directory Users and Computers item on the Domain Controller.

  2. Create the following 4 Security Groups. You must use the exact spelling and case for the group names otherwise Spector 360 will not properly detect the presence of these groups:
    (1) Spector 360 Admins - Privileges to all functions (same as a Domain Administrator)
    (2) Spector 360 Managers - Privileges to the Manage Computer view functions
    (3) Spector 360 Configurers - Privileges to the Configure Computer view functions
    (4)
    PowerUsers - Contains all other Spector 360 Groups allowing the Control Center user to be a Client Administrator.  This group should be set up as an Administrator on all the Client computers.

  1. Add the Spector 360 Admins, Spector 360 Managers, and Spector 360 Configurers groups as members of the PowerUsers group.

  2. Add the domain users as members of the Spector 360 groups, as appropriate.

A user can be in more than one of the groups listed and have appropriate permissions for each group.

A user can be in the Spector 360 Admins domain group and not in the other groups (as they may not even exist) and, as far as the Control Center is concerned, the user will automatically be considered in the other three (3) groups.

 


Related Topics:

Accessing Control Center Properties

Manage Computers View

Configure Computers View