Changes for page 6.I. Hinzufügen von Active Directory Nutzern
Last modified by Tobias Wintrich on 2024/03/04 15:00
From version 3.1
edited by Ulrich Mertz
on 2023/07/19 15:55
on 2023/07/19 15:55
Change comment:
There is no comment for this version
To version 4.1
edited by Tobias Wintrich
on 2024/03/04 14:59
on 2024/03/04 14:59
Change comment:
There is no comment for this version
Summary
-
Page properties (2 modified, 0 added, 0 removed)
Details
- Page properties
-
- Author
-
... ... @@ -1,1 +1,1 @@ 1 -XWiki. UlrichMertz1 +XWiki.twintrich - Content
-
... ... @@ -1,28 +1,35 @@ 1 - Scheduledactions can be setup fromtheright-mouse-click-menu.1 += Import of AD users = 2 2 3 - Astarttime andoptionalintervalforrepetitioncanbespecifiedforhetask.3 +In order to be able to use user accounts in the TCMS, they must first be imported. 4 4 5 -Th eplanned actionsset up fordividualclientsoranentire group,depending on the selection:5 +To do this, select your [[configured domain>>url:https://kb.rangee.com/Handbuecher/TCMS11.00/Kapitel%205%20-%20Den%20TCMS%20einrichten/5.E.%20Bearbeiten-Men%C3%BC/5.E.A.%20Einstellungen%20bearbeiten/5.E.A.D.%20Active%20Directory/]] in the group view and select one of the corresponding options using the "+" symbol in the top right-hand corner: 6 6 7 -- wake up 7 +* Import AD-Users: Shows you a list of available AD accounts from which you can select individual accounts (the display is limited to 500 elements) 8 +* Import AD-Users by Name: Here you can import individual users directly by entering a user name 9 +* Subscribe AD-Groups: Displays a list of AD groups which you can subscribe to. All users of a subscribed group are automatically imported (the display is limited to 500 elements). 10 +* Subscribe AD-Groups by Name: Here you can subscribe directly to an AD group by entering your name. 8 8 9 - - shut down12 +[[image:import_User.png]] 10 10 11 - -standby14 += Use of AD users = 12 12 13 - -Reboot16 +Imported AD users can be used in 2 ways: 14 14 15 -- send Message 18 +1. As administrative users on the TCMS 19 +1. To tunnel an AD login from RangeeOS via the TCMS - In this mode, a user can also be assigned a profile 16 16 17 - -Rediscover21 +== Use as administrative user == 18 18 23 +To assign a user authorizations to manage a Thin Client group, simply drag and drop the user object onto the corresponding group. The user immediately has full access to this and all subordinate groups. All authorized users for a ThinClient group are displayed in the "Admins" group tab. 19 19 20 - Afterselectingthe desiredaction,activatetheScheduledcheckbox. Thenthe descriptionforthe planned actioncanbeedited,the datecan bepecified via the calendarbutton and the time canbe specified via a drop-down menu for execution.Inordertorunthe planned action regularly,the Recurringcheckboxmustbeactivated.Theintervalcanthen be specifiedviaa drop-downmenu.25 +It is also possible to assign special authorizations to a user for accessing the thin client's Kommbox. To do this, right-click on the relevant user and select "**Assign authorizations**": 21 21 22 - For clients that are in a network area, where the TCMS signal will not work (e.g. a Wake-On-Lan command),thetask can beredirected to a thinclient, which iscapable of executingthe command.27 +[[image:edit_permissions.png]] 23 23 24 - Note:Theclientwhichovertakesthe taskfromTCMSmust beswitched on, whenhetask is createdonTCMSandat thetimeitshouldbe executed.29 +== Tunneling of an AD login + assignment of a user profile (optional) == 25 25 26 - Theplannedactionscan be editedanddeletedlaterviahe tabxtheptreeview.31 +Imported AD users can also be used for a tunneled login. For this purpose, the option "**Use TCMS instead of Kerberos for authentication**" must be set on the Thin Client page, in addition to a corresponding AD configuration (see [[User login>>url:https://kb.rangee.com/Handbuecher/10.00/Admin%20Guide%2010.00/Kapitel%203%20-%20Administration%20des%20Clients/3.H.%20ActiveDirectory%20Konfiguration/3.H.B.%20Benutzeranmeldung]] in the Thin Client administration manual) 27 27 33 +Users who carry out authentication in this way can also be assigned a profile. This means, for example, that a left-handed user can always be set up with a left-handed mouse, regardless of which client they log on to. A profile is assigned by right-clicking on the user -> "**Assign profile**". Everything you need to know about creating profiles can be found under [[Profiles>>url:https://kb.rangee.com/Handbuecher/TCMS11.00/Kapitel%206%20-%20Arbeiten%20mit%20dem%20TCMS/6.G.%20Profile/]]. 34 + 28 28