8e6 Technologies Enterprise Filter Authentication R3000 User Manual

Size:
6.79 Mb
Download

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

Set up NT Domain Groups, Members

In the control panel, the NT domain branch of the tree menu includes options for setting up groups and/or members in the domain so that filtering profiles can later be created. The following options are used in this setup process: Select Group/Member from Domain, Set Group Priority, Manually Add Member, Manually Add Group, and Upload User/Group Profile.

Add NT groups, members to the tree

Before you can create filtering profiles for groups and/or members in a domain, you must first add the groups and/or members to the tree list for that domain.

Fig. 3-5Select Groups/Members from Domain window

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

109

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

Select the NT domain, and choose Select Group/Member from Domain from the pop-up menu to display the Select Groups/Members from Domain window (see Figure 3-5).

To add groups—thatneed filteringprofiles—tothe tree list:

1.Choose a group from the Available Groups list box.

2.Use the right arrow button (>) to move the group to the Selected Groups list box.

If necessary, select a group and use the left arrow button

(<) to move the group back to the Available Groups list box.

To add group members—whoneed filteringprofiles—tothe tree list:

1.Choose the group from the Available Groups list box.

2.Click Show Members to display group members in the Available Members list box.

3.Choose a member from the Available Members list box, and use the right arrow button (>) to move the group to the Selected Members list box.

If necessary, select a member and use the left arrow button (<) to move the member back to the Available Members list box.

When all entities who need filtering profiles have been added to the selected Groups and/or Selected Members list box(es), click Add Selected Groups & Members to add them within the domain's section of the tree list.

NOTE: See Add or maintain an entity’s profile under Create and Maintain NT Profiles for information on defining the filtering profile for the group.

110

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

WARNING: When adding an NT group or member to the tree list, the group/member will be blocked from Internet access if the minimum filtering level has not been defined via the Minimum Filtering Level window. If you have just established the minimum filtering level, filter settings will not be effective until the group member/user logs off and back on the server. Refer to the R3000 User Guide for more information on the minimum filtering level.

Specify a group’s filtering profile priority

1.Select the NT domain, and choose Set Group Priority from the pop-upmenu to display the Set Group Priority window:

Fig. 3-6Set Group Priority window

This window is used for designating which group profile will be assigned to a user when he/she logs in. If a user is a member of multiple groups, the one that is positioned highest in the list is applied.

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

111

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

NOTES: Groups automatically populate the Profile Group(s) list box, if these groups have one or more identical users and were added to the tree list via the Select Groups/Members from Domain window.

An entry for the Group Priority list is added to the end of the list when the group profile for that group is added to the R3000, and is removed automatically when you delete the profile.

2.To change the filtering priority of groups:

a.Select a group from the Profile Group(s) list box.

b.Use the up or down arrow button to move that group up or down in the list.

c.Click Apply to apply your settings.

112

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

Manually add a user’s name to the tree

1.Select the NT domain, and choose Manually Add Member from the pop-upmenu to open the Manually Add Member dialog box:

Fig. 3-7Manually Add Member box

This dialog box is used for adding a username to the tree list, so that a filtering profile can be defined for that user.

2. Enter the username in the text box, up to 16 characters.

TIP: NT usernames should be entered without breaks or spaces. The first character must be a letter. The following ASCII characters can be used:“A-Z”,“a-z”,“0-9”,“_” (underscore), and“-”(hyphen).

Examples:

TJONES

JSmith

Jane_Doe

Doe-John

3.Click OK to add the username to the domain’s section of the tree.

NOTE: See Add or maintain an entity’s profile under Create and Maintain NT Profiles for information on defining the filtering profile for the user.

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

113

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

Manually add a group’s name to the tree

1.Select the NT domain, and choose Manually Add Group from the pop-up menu to open the Manually Add Group dialog box:

Fig. 3-8Manually Add Group box

This dialog box is used for adding a group name to the tree list, so that a filtering profile can be defined for that group.

2.Enter the group’s name in the text box.

3.Click OK to add the group name to the domain’s section of the tree.

NOTE: See Add or maintain an entity’s profile under Create and Maintain NT Profiles for information on defining the filtering profile for the group.

114

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

Upload a file of filtering profiles to the tree

1.Select the NT domain, and choose Upload User/Group Profile from the pop-up menu to display the Upload User/ Group Profile window:

Fig. 3-9Upload User/Group Profile window

This window is used for uploading a file to the tree with user or group names and their associated filtering profiles.

2.Click Upload to open the Upload Member Profile Filepop-upwindow:

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

115

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

Fig. 3-10Upload Member Profile File window

3.Click Browse to open the Choose file window.

4.Select the file to be uploaded.

WARNING: Any file uploaded to the server will overwrite the existing user/group profile file.

Each user/group profile in the file uploaded to the server must be set up in a specified format in order for the profile to be activated on the server. This format differs depending on whether the profiles are user or group profiles. Based on the type of file format used, the file should have the following name:

ntuserprofile.conf if the file contains NT user profiles

ntgroupprofile.conf if the file contains NT group profiles

NOTE: See Appendix A: User/Group File Format and Rules for examples of valid filtering profile formats to use when creating a list of profiles to be uploaded to the server.

WARNING: When uploading a list of profiles to the tree list, the user will be blocked from Internet access if the minimum filtering level has not been defined via the Minimum Filtering Level window. If you have just established the minimum filtering level, filter settings will not be effective until the user logs off and back on the server. Refer to the R3000 User Guide for more information on the minimum filtering level.

116

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

CHAPTER3: NT AUTHENTICATIONSETUPSET UP NT DOMAIN GROUPS, MEMBERS

5.Click Upload File to upload this file to the server. The Upload Successfulpop-upwindow informs you to click Reload in order for these changes to be effective.

6.Click Reload.

7.Go to the NT branch of the tree, and choose Refresh from the NT group menu.

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE

117

CHAPTER3: NT AUTHENTICATIONSETUPCREATE AND MAINTAIN NT PROFILES

Create and Maintain NT Profiles

Once an NT group or member has been added to the tree, a filtering profile can be created and maintained for that entity. For groups, the following options are available for filtering profile creation and maintenance: Group Member Details, Profile, and Remove. For members, the following options are available for filtering profile creation and maintenance: Profile, and Remove.

Add an NT group, member to the tree list

Select the NT domain, and choose Group Member Details from the pop-upmenu to display the Group/Member Details window:

Fig. 3-11Group/Member Details window

118

8E6 TECHNOLOGIES, R3000 ENTERPRISEFILTERAUTHENTICATIONUSERGUIDE