| Management Products |
|
Frequently Asked Questions
Q: What changes are made to Active Directory or Exchange when eControl is installed?
A: eControl is installed on a separate server. The eControl installation does not modify anything in Active Directory or Exchange. In fact, when you turn off the eControl server, there are no elements that are left behind in Active Directory or Exchange.
Q: What changes are made to eDirectory and GroupWise when eControl is installed?
A: When eControl is installed, the installation wizard ensures the LDAP classes and attributes are fully mapped to support all of eControl's options. There are no changes made to the GroupWise system.
Q: How does eControl assign rights or permissions?
A: eControl does not assign rights or permissions to users. In fact, eControl allows you to remove all adminstrator privileges and supervisor rights in your target systems. The eControl service must be registered as a user with administrator permissions in the target systems (Active Directory, Exchange, eDirectory, GroupWise). There are no changes made to existing accounts. There are no changes to anything in Active Directory or Exchange (rules, profiles, policies, etc.). We recommend you create a new user with administrator privileges to be used by eControl. This account must be created in an OU that has no password expiration policy applied and the password must be set to never expire. The eControl service carries out the account management tasks the administrator has authorised on behalf of the user.
Q: Why is an SSL certificate required in the Active Directory target system?
A: An SSL certificate is required by Microsoft for eControl and other third-party applications to be allowed to change Active Directory passwords. The SSL certificate ensures all communication from eControl to the Active Directory Domain Controller are encrypted. The SSL certificate ensures the password is encrypted and transmitted securely – not in clear text. More information on installation requirements are available at http://www.omni-ts.com/web-management/requirements.html.
Q: What Active Directory roles, policies or other system definitions are changed by eControl?
A: The eControl installation will not add or modify any roles, group policies or other definitions in your system. There are no changes to the company's Active Directory or Exchange systems. The eControl server is a completely independent service that talks directly to LDAP/Active Directory/Exchange to make appropriate user changes based on tasks that are enabled by the administrator. When you turn off the eControl server, there are no elements that remain in Active Directory or Exchange except for account values that have been authorized to be changed (passwords, group memberships, phone numbers, title, position, department, etc.).
Q: Do I have to create new user accounts and assign them to the eControl system?
A: No. eControl users / junior administrators login to the eControl web server using their standard eDirectory or Active Directory login and password. eControl tasks are assigned to groups. Any user in a group that has been assigned authority to carry out a user management task or an account create task will be able to see that task after he logs into eControl.
Q: What is an eControl task?
A: eControl tasks are the most granular function that can be carried out by an eControl user. Exampes include:
1. Being able to change a user password for Active Directory/Exchange or eDirectory and GroupWise;
2. Being able to unlock an account after Intruder Detection has locked the account;
3. Being able to disable a user account or expire an email account;
4. Assigning a user to an Active Directory security group or email-enabled group or to an eDirectory group or GroupWise Distribution List;
5. Update user demographic information (department, phone number, etc.) and much more...
Q: How does the eControl "Create" module work?
A: The eControl Create allows the adminstrator to define multiple "Create" profiles. These profiles are associated to different templates and contain all of the information that is required to create an account: login name, first name, last name, email account, visibility, group membership, account expiry date, etc. The eControl operator selects a profile, fills in the required account information (configured by the administrator) and the account (group, distribution list or any of the supported object types) gets created based on the eControl profile. Think of an eControl profile as a user create "wizard". The wizard checks to make sure the account is unique in the target systems before it allows eControl to create the account.
Q: What platform is required for eControl?
A: eControl must be installed on a Windows Operating System. To manage GroupWise, eControl is required to use the Win32 GroupWise APIs. eControl is compatible with Active Directory running on all versions of Windows Server and eDirectory and GroupWise running on Novell NetWare, OES, SUSE Linux and Microsoft Windows.
Q: Can I tell which eControl operator made what changes?
A: Yes. eControl allows you the administrator and delegated accounts to have access to the full audit and to run reports. This includes everything from who changed whose password to who viewed which group membership list. The Audit Trail and reports can be exported to a spreadsheet for extensive reporting purposes.
Q: We administer Active Directory and Exchange for three different companies. These are independent systems. How can eControl help?
A: eControl provides the same functionality for managing multiple Active Directory and Exchange systems (Manage, Create, Self-service and Audit) as is provided for single systems. You can configure eControl to manage multiple Active Directory and Exchange systems from a single browser. One of eControl's strongest and unique features is its ability to allow a delegated user from one system to manage multiple systems without needing to have an account and password on each of the target systems. Use our Contact Us page to request information about how eControl can help in multiple and mixed system environments.
Q: I have a single GroupWise system that spans three different eDirectory trees. How can eControl help?
A: eControl allows you to manage multiple eDirectory trees and multiple GroupWise systems from a single browser interface.
Q: We use Novell eDirectory and Microsoft Exchange as our email platform. What can eControl do for me?
A: eControl compatible with Novell eDirectory, GroupWise, and Microsoft Active Directory and Exchange. Your eControl operators are able to manage multiple different systems from a single browser without any "rights" to eDirectory or GroupWise or "permissions" to Active Directory and Microsoft Exchange.
Q: How does the "Forgot My Password" option work?
A: The eControl Self-service module allows users to change their directory or email password from a browser by answering the challenge/response questions that are configured for the user. The user configures the answers to the required questions in the user Self-service module.
Q: What other options are there in the Self-service module?
A: One of the features that administrators appreciate is being able to allows users to subscribe to or unsubscribe from GroupWise or Exchange Distribution Lists that have been made available for that user. By allowing users to self-subscribe to email distribution lists, you effectively change GroupWise or Exchange into a List Server.
Q: What customisation services are available for eControl?
A: We have customised eControl to meet a number of different customer requirements. These include automating user creation based on Banner Student Registration Systems, allowing students to create and/or activate their accounts from a web browser, and others. If eControl doesn't quite do what you want it to do, contact us with your requirements and we will see what we can do to help out.
|