Aldo Zanoni
Admin Group
Director of Customer Service
Joined: 25-February-2003
Location: Canada
Posts: 91
|
| Posted: 27-February-2003 at 8:52am
|
|
|
Yes, standard NDS rights are required for HDU. The one saving grace with HDU is that it provides a "safe" interface. This restricted interface precludes people from making mistakes such as deleting objects or assigning too many rights, etc.
eControl is the product we have that delivers web-based, "ZERO-Rights", user account and identity management for eDirectory, GroupWise, Active Directory and Exchange. For more information about eControl, visit: http://www.omni-ts.com/web-management/
We have a number of customers who deal with part of the HDU rights issue by putting IRFs on NWAdmin and ConsoleOne so Tier One types can`t "easily" access those tools.
Another option is eControl. HDU clients with upgrade protection receive a significant reduction to upgrade to eControl. As mentioned, HDU requires that you assign users the required NDS-eDirectory rights. This means that users who have access to NWAdmin or Console One can still use those applications to make changes in NDS. This possibility can be decreased by placing IRFs on those applications to prevent them from being available. This does not stop someone from installing ConsoleOne locally and using it or does not change the fact that people need rights on home directories and GW Domains. That, on the other hand, is a management/supervision issue, rather than a technology issue. HDU`s biggest advantage is that users` "functional" ability is restricted to the options you activate in the HDU interface.
eControl, on the other hand, is different from HDU in that it provides all of the functionality of HDU without needing to assign NDS-eDirectory rights to individual users.
eControl is accessed from a web server and there is no application to install on the HDOs workstation. With eControl, supervisor rights are assigned to the web service - there are no rights that need to be assigned to the users. eControl manages the tasks that are enabled. You control who has the ability to carry out help desk tasks by using the eControl Administration Interface to assign HDO tasks to specific users for assigned containers - no NDS rights assignments required. HDOs authenticate to the eControl web server with their NDS user login and password. Based on the rights you have assigned, users are able to complete help desk administration tasks. HDUWeb rights are assigned to NDS groups. Users acquire HDO rights by being members of different NDS groups that have received HDUWeb rights. The eCtonrol Configuration Tool allows you to completely restrict the functions that individual or HDO "roles" are allowed to carry out.
Aldo
Edited by Aldo Zanoni on 11-March-2006 at 10:33am
|
Omni Web Forum : Web based User Management : eControl ~ General Product Inquires
Topic: Does HDU require Admin rights to use
