Wiki source code of 6.I. Hinzufügen von Active Directory Nutzern
Last modified by Tobias Wintrich on 2024/03/04 15:00
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
 |
12.1 | 1 | = Import of AD users = |
| |
3.8 | 2 | |
| |
12.1 | 3 | In order to be able to use user accounts in the TCMS, they must first be imported. |
| |
3.8 | 4 | |
| |
12.1 | 5 | To do this, select your [[configured domain>>url:https://kb.rangee.com/Handbuecher/TCMS11.00/Kapitel%205%20-%20Den%20TCMS%20einrichten/5.E.%20Bearbeiten-Men%C3%BC/5.E.A.%20Einstellungen%20bearbeiten/5.E.A.D.%20Active%20Directory/]] in the group view and select one of the corresponding options using the "+" symbol in the top right-hand corner: |
| |
3.8 | 6 | |
| |
12.1 | 7 | * Import AD-Users: Shows you a list of available AD accounts from which you can select individual accounts (the display is limited to 500 elements) |
| 8 | * Import AD-Users by Name: Here you can import individual users directly by entering a user name | ||
| 9 | * Subscribe AD-Groups: Displays a list of AD groups which you can subscribe to. All users of a subscribed group are automatically imported (the display is limited to 500 elements). | ||
| 10 | * Subscribe AD-Groups by Name: Here you can subscribe directly to an AD group by entering your name. | ||
| |
3.8 | 11 | |
| |
8.1 | 12 | [[image:import_User.png]] |
| |
5.1 | 13 | |
| |
12.1 | 14 | = Use of AD users = |
| |
3.8 | 15 | |
| |
12.1 | 16 | Imported AD users can be used in 2 ways: |
| |
5.1 | 17 | |
| |
12.1 | 18 | 1. As administrative users on the TCMS |
| 19 | 1. To tunnel an AD login from RangeeOS via the TCMS - In this mode, a user can also be assigned a profile | ||
| |
8.1 | 20 | |
| |
12.1 | 21 | == Use as administrative user == |
| |
8.1 | 22 | |
| |
12.1 | 23 | To assign a user authorizations to manage a Thin Client group, simply drag and drop the user object onto the corresponding group. The user immediately has full access to this and all subordinate groups. All authorized users for a ThinClient group are displayed in the "Admins" group tab. |
| |
8.1 | 24 | |
| |
12.1 | 25 | It is also possible to assign special authorizations to a user for accessing the thin client's Kommbox. To do this, right-click on the relevant user and select "**Assign authorizations**": |
| |
8.1 | 26 | |
| 27 | [[image:edit_permissions.png]] | ||
| 28 | |||
| |
12.1 | 29 | == Tunneling of an AD login + assignment of a user profile (optional) == |
| |
8.1 | 30 | |
| |
12.1 | 31 | Imported AD users can also be used for a tunneled login. For this purpose, the option "**Use TCMS instead of Kerberos for authentication**" must be set on the Thin Client page, in addition to a corresponding AD configuration (see [[User login>>url:https://kb.rangee.com/Handbuecher/10.00/Admin%20Guide%2010.00/Kapitel%203%20-%20Administration%20des%20Clients/3.H.%20ActiveDirectory%20Konfiguration/3.H.B.%20Benutzeranmeldung]] in the Thin Client administration manual) |
| |
8.1 | 32 | |
| |
12.1 | 33 | Users who carry out authentication in this way can also be assigned a profile. This means, for example, that a left-handed user can always be set up with a left-handed mouse, regardless of which client they log on to. A profile is assigned by right-clicking on the user -> "**Assign profile**". Everything you need to know about creating profiles can be found under [[Profiles>>url:https://kb.rangee.com/Handbuecher/TCMS11.00/Kapitel%206%20-%20Arbeiten%20mit%20dem%20TCMS/6.G.%20Profile/]]. |
| |
8.1 | 34 | |
| 35 |