Lenovo ThinkVantage (Hardware Password Manager Deployment Bedienungsanleitung Seite 26

  • Herunterladen
  • Zu meinen Handbüchern hinzufügen
  • Drucken
  • Seite
    / 60
  • Inhaltsverzeichnis
  • LESEZEICHEN
  • Bewertet. / 5. Basierend auf Kundenbewertungen
Seitenansicht 25
HardwarePasswordManagergroups”onpage12foradescriptionofroles.)So,forexample,auser
mightseealloptionsontheHardwarePasswordManagerBIOSmenubutaServiceTechnicianmight
havealimitedsetofoptionsavailable.
Note:WhentheclientpolicyissettoHardwareAccountequalsWindowscredentials,theChange
HardwareAccountpasswordoptionwillnotbedisplayedwhetherornotitisselectedfortherole.
TheBIOSversionexcludelistsectionenablesyoutolistBIOSversionsthatyouwanttoexcludefrom
HardwarePasswordManagermanagement.Ifyouattempttoperformanyremoteactionsonadevice
withalistedBIOS,theremoteactionwillfail.Likewise,ifyouattempttoregisteraHardwarePassword
ManagerdevicethathasalistedBIOS,theregistrationwillnotbeperformed.
Deningscopesandrolesforconsoleusers
ScopesandrolescanbedenedtocontroltheaccesstovariousfeaturesofHardwarePasswordManagerin
theThinkManagementConsole.
Scopesareusedtodenewhichdevicesaconsoleuserhasaccessto.Tocreateanewscope,do
thefollowing:
1.SelectAdministrationinthetoolboxoftheconsole.
2.Double-clickUserstoopentheUserstool.
3.Click+onthetoolbarorright-clickScopes,andthenclickNewscope.
4.Enteranameforthescope.
5.SelectLDMSQueryasthescopetypeandthenclickNew.
6.Selectanelementfromthelistofinventorieditems(forexample:ComputerName,ComputerLocation,
DomainName,andsoon).
7.Selectacomparisonoperator(forexample:=,<>,Like,Exists,andsoon).
8.EitherselectanexistingvaluefromthedisplayedscannedvaluesorenteravalueunderEditvalues.
9.ClickInsert.
10.ClickOK.
11.ClickOK.
Afteryouhavedenedthenecessaryscopes,youcancreatevariousrolestobeassociatedwiththescopes.
Tocreateanewrole,dothefollowing:
1.IntheUserstool,click+onthetoolbarorright-clickRoles,andthenclickNewrole.
2.Enteranameforthisrole.
3.SelectthepermissionlevelsforthevariousHardwarePasswordManagerfeaturesyouwantthisroleto
haveaccessto.ThepermissionlevelsarecategorizedintoView,Edit,andDeploy.Somepermissions
onlyallowoneofthreelevels,butothersmightallowtwo.
4.Selectthescopestoassignthisroleto.
5.ClickSave.
Inordertogettheusersaccesstotheconsole,theusersshouldbemembersofgroupsthathavebeen
authorizedtheproperaccess.Thisaccessiscontrolledbycreatinganewauthenticationanddeninggroup
permissionsasthefollowing:
1.IntheUser'stool,click+onthetoolbarorright-clickAuthentications,andthenclickNew
authentication.
2.Enteranamefortheauthentication.
3.Enterthefulldomainname.
4.Entertheusernameandpasswordofaserviceaccountthatcanbeusedtoquerythedirectory.
18HardwarePasswordManagerDeploymentGuide
Seitenansicht 25
1 2 ... 21 22 23 24 25 26 27 28 29 30 31 ... 59 60

Kommentare zu diesen Handbüchern

Keine Kommentare