Last modified by Tobias Wintrich on 2024/03/04 15:00
Show last authors
1 = Import of AD users =
2
3 In order to be able to use user accounts in the TCMS, they must first be imported.
4
5 To do this, select your [[configured domain>>url:https://kb.rangee.com/Handbuecher/TCMS11.00/Kapitel%205%20-%20Den%20TCMS%20einrichten/5.E.%20Bearbeiten-Men%C3%BC/5.E.A.%20Einstellungen%20bearbeiten/5.E.A.D.%20Active%20Directory/]] in the group view and select one of the corresponding options using the "+" symbol in the top right-hand corner:
6
7 * Import AD-Users: Shows you a list of available AD accounts from which you can select individual accounts (the display is limited to 500 elements)
8 * Import AD-Users by Name: Here you can import individual users directly by entering a user name
9 * Subscribe AD-Groups: Displays a list of AD groups which you can subscribe to. All users of a subscribed group are automatically imported (the display is limited to 500 elements).
10 * Subscribe AD-Groups by Name: Here you can subscribe directly to an AD group by entering your name.
11
12 [[image:import_User.png]]
13
14 = Use of AD users =
15
16 Imported AD users can be used in 2 ways:
17
18 1. As administrative users on the TCMS
19 1. To tunnel an AD login from RangeeOS via the TCMS - In this mode, a user can also be assigned a profile
20
21 == Use as administrative user ==
22
23 To assign a user authorizations to manage a Thin Client group, simply drag and drop the user object onto the corresponding group. The user immediately has full access to this and all subordinate groups. All authorized users for a ThinClient group are displayed in the "Admins" group tab.
24
25 It is also possible to assign special authorizations to a user for accessing the thin client's Kommbox. To do this, right-click on the relevant user and select "**Assign authorizations**":
26
27 [[image:edit_permissions.png]]
28
29 == Tunneling of an AD login + assignment of a user profile (optional) ==
30
31 Imported AD users can also be used for a tunneled login. For this purpose, the option "**Use TCMS instead of Kerberos for authentication**" must be set on the Thin Client page, in addition to a corresponding AD configuration (see [[User login>>url:https://kb.rangee.com/Handbuecher/10.00/Admin%20Guide%2010.00/Kapitel%203%20-%20Administration%20des%20Clients/3.H.%20ActiveDirectory%20Konfiguration/3.H.B.%20Benutzeranmeldung]] in the Thin Client administration manual)
32
33 Users who carry out authentication in this way can also be assigned a profile. This means, for example, that a left-handed user can always be set up with a left-handed mouse, regardless of which client they log on to. A profile is assigned by right-clicking on the user -> "**Assign profile**". Everything you need to know about creating profiles can be found under [[Profiles>>url:https://kb.rangee.com/Handbuecher/TCMS11.00/Kapitel%206%20-%20Arbeiten%20mit%20dem%20TCMS/6.G.%20Profile/]].
34
35