OVERVIEW • Working with user accounts. • Working with security groups. • Managing file system access.
WORKING WITH USER ACCOUNTS • Establish security accounts. • Modify user accounts. • Delete user accounts.
Establish security accounts ConsoleOne: • Comprehensive tool to administer nearly any object that exists in an NDS tree.
Establish security accounts ConsoleOne
Establish security accounts To create a new user account: • Access File menu. • Choose New. • Choose User.
Establish security accounts New User Dialog Box
Establish security accounts To create a new user account: • Click OK to create user account. • Assign user password.
Modify user accounts Steps: • Double-click user object. • Click different tabs to access account settings types in the Properties dialog box.
Modify user accounts General/Identification: • Defines additional user information.
Modify user accounts User Properties dialog box
Modify user accounts General/Environment: • Enables definition of the language the user will use and the default server.
Modify user accounts Default Server: • In a single Network, do not set the server. • In a multi-server Network, specify the server.
Modify user accounts General/Environment tab
Modify user accounts Restrictions/Password Restrictions tab
Modify user accounts Login Restrictions: • Account disabled. • Account has expiration date. • Limit concurrent connections from different computers.
Modify user accounts Time Restrictions: • Allow/disallow login times.
Modify user accounts Restrictions/Time Restrictions tab
Modify user accounts Address Restrictions: • Restrict access. Intruder Detection: • Restrictions/Intruder Lockout.
Modify user accounts Administrative duties: • Rights to files/ folders. • Memberships/ group membership. • Memberships/ Security Equal To. • Security Equal to Me.
Delete user accounts Steps: • Select object in the right pane. • Open File menu. • Choose Delete NDS Object.
WORKING WITH SECURITY GROUPS • Creating groups • Maintaining group membership
Creating groups Steps: • Select organization container. • Open File menu. • Choose New. • Choose Group. • Enter new group name. • Click OK.
Creating groups New Group dialog box
Maintaining group membership Steps: • Open group object in ConsoleOne • Use Members tab. • Open individual user’s Properties dialog box. • Use Memberships/Group Membership tab.
Maintaining group membership ConsoleOne Member’s tab
MANAGING FILE SYSTEM ACCESS Administer volume and folder security: • Use Network Neighborhood/My Computer as Administrator. • Use ConsoleOne to assign permissions.
Managing file system access NetWare Rights tab
Managing file system access Trustees tab
Managing file system access • Understanding NetWare folder permissions • Assigning rights
Understanding NetWare folder permissions • Manage permissions to folders and individual files. • Folder and file permissions use same rights.
Understanding NetWare folder permissions File system security rights: • Supervisor • Read • Write • Create
Understanding NetWare folder permissions File system security rights: • Erase • Modify • File Scan • Access Control
Understanding NetWare folder permissions Tips: • For read-only access to a folder, grant Read and File Scan rights. • Create folders similar to secure in-box by granting Create right. • Cumulative file system rights. • Consider capabilities granted to user with rights.
Assigning rights To add a Trustee: • Navigate to the folder. • Right-click the folder. • Choose Properties. • Select Add Trustee button. • Choose user/group from list. • Click OK. • Use checkboxes in Access Rights portion of the Trustees of This Directory tab.
Assigning rights To remove a Trustee: • Select that person in the list. • Click Delete Trustee.
SUMMARY Working with user accounts: • Establish security accounts • Modify user accounts • Delete user accounts
Summary Working with security groups: • Creating groups • Maintaining group membership
Summary Managing file system access: • Understanding NetWare folder permissions • Assigning rights