SyferLock Help Center

FAQ for GridGuard Administrators

Frequently Asked Questions by GridGuard Administrators

1. Q. What can a GridGuard Administrator do?

A. Gridguard Administrators can reset a user’s account information (Which forces the user to re-register), change a user’s password target position, and also have visibility into user’s account activity.

2. Q. How many of a user’s activity transactions are listed in the security center?

A. Administrators can observe the last 15 transactions of the specified user’s activity.

3. Q. Does everybody have the administration section in their security center?

Q. Does everybody have the administration section in their security center?

A. No. The Administration section in  the Security Center is available to those individuals who are a member of the Grid Administrators group. These group(s) can be defined on the User Groups tab as shown above. Multiple groups can be defined; one per line.

4. Q. How can I force a user to re-register with GridGuard™ again?

A. You will need to login to your Security Center. Click on “Reset User Account” option. Enter the user name to search, then click “Reset” button. You will see the confirmation screen. User will go through the “Day 1 Registration” process at next login attempt.

5. Q. How do I set up the AD service account with the permission to update custom Attributes?

A. Follow the steps given below:

Disable Property Filtering (http://support.microsoft.com/?kbid=296490)

  1. On AD Server, open file C:\Windows\System32\dssec.bat
  2. Under the [user] section, add the line ‘propertyname=0’
  3. Save & close file
  4. If ‘Active Directory Users & Computers’ mmc is open, close it

Start ‘Active Directory Users & Computers’ MMC

  1. Navigate to the OU level at which to grant permissions
  2. Right click and select Properties
  3. Select Security Tab
  4. Click Advanced
  5. Under Permission entries table, click Add
  6. Enter the group name
  7. Click ‘OK’ to display the ‘Permission Entry for Users’ screen
  8. Click on Properties tab
  9. Change Apply onto to ‘User objects’
  10. Under permissions, you should see ‘Read Custom Attribute X’ and ‘Write Custom Attribute Y’ permissions listed
  11. Check ‘Allow’ for attributes 1, 2, and 3
  12. Click OK and save changes
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk