...
| Login Provider Type | Authentication Resource | Included by Default | Notes | |||||
|---|---|---|---|---|---|---|---|---|
| Server Local | User Account Control | Yes | This provider interfaces with accounts local to the Site Manager server. Administrator Authenticates local users. Local administrator accounts will always have permission to access Site Manager. This provider cannot be deleted. | |||||
| Primary Server Domain | Active Directory | Yes (if the Site Manager server is connected joined to a domain) | This provider interfaces with Authenticates users on the domain the Site Manager server is connected joined to. It is created automatically and can not be removed by the user. Domain Administrators can always log in using this provider.
| |||||
| Secondary Server Domain | Active Directory | Yes (if the Site Manager server is joined to a domain in a forest) | Authenticates users on domains within the forest the Site Manager server is joined to. It is created automatically and can not be removed.
| |||||
| Domain | Active Directory | No | This provider interfaces with Active Directory domains other than that which the Site Manager server is connected to. |
| Info | ||
|---|---|---|
| ||
Site Manager must connect with a Domain Controller which supports the Virtual List View controls (a part of LDAP V3) LDAP v3 for permissions to be set for accounts on the Domain. LDAP over SSL will be used if available. |
Managing Login Providers
Domain providers are created and configured by the user (Server Local and Server Domain providers are created automatically on startup) through a dialog accessed through the security settings page.
| Info | ||
|---|---|---|
| ||
Site Manager automatically creates Local, Primary Server Domain and Secondary Server Domain providers on startup. Users can stop Site Manager creating domain providers by setting the registry value "Configure default providers" in the key "HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager" to 0. This will prevent Site Manager from creating any providers except the primary domain and local computer providers. |
While the automatic providers should cater for most needs, custom domain providers can be created to connect to domains outside of the forest the Site Manager server is in. Beware that members of authorized groups can only access Site Manager if they are on the same domain as the group. This differs from the automatic domain providers which support cross domain authorization.
All providers are listed within the provider manager dialog. Providers can be configured or removed by clicking the respective buttons in the table. New providers can be created by clicking the Add button, which opens the a dialog to configure a new Domain provider.
A Domain provider can be configured with the following fields:
| Field | Notes | |||||
|---|---|---|---|---|---|---|
| Name | A friendly name which is displayed to users. If no name is provider then the provider will be named after the domain it is associated with. | |||||
| Domain controllerController | The host name of a domain controller. This can be in the form of a DNS-style name, a NetBIOS address or an IP address.
| |||||
| Username | The username of an account on the domain. The credentials of this account will be used to perform any lookups against the LDAP server. | |||||
| Password | The password of the account specified by the username entered in the previous field. | |||||
| Display Order Priority | The order the provider will appear in dropdown lists like on the login page and the permissions modal. There is also an option to hide the provider from lists other than the table in the provider manager which may be useful if there are unused automatically generated providers. |
After clicking "Save", Site Manager will check the validity of the configuration. If a provider can be created then the configuration is saved and a provider is added to the list of providers in the previous window. Otherwise, the an error message will appear explaining the problem.
Configuring Permissions
| Info | ||
|---|---|---|
| ||
Admins of the domain the Site Manager server is connected to and local administrator accounts are granted Site Manager access by default. Permissions for domain admins can be disabled by setting the registry value "Disable Default Admin Access" in the key "HKEY_LOCAL_MACHINE\SOFTWARE\Macrium\Site Manager" to 1. Local administrators will always have permission to access Site Manager. |
Next to the Manage Provider button on the security settings page is the Manage Permissions button. Clicking this button will open the permissions management window.
...
Permissions are configured separately for each provider; it is necessary to select . Select the correct provider from the combo box dropdown before configuring permissions.
...
A table listing the active permissions is below the provider selection field. Here the names of authorized users and groups are displayed. All members of an authorized group are given the permissions of that group (membership is applied transitively). Permissions can be deleted by clicking the Remove button. Click Configure to add permissions. Note that changes Changes to permissions can be discarded by clicking cancel.
...