Administrator's Guide - Kerio Software Archive
Administrator's Guide - Kerio Software Archive Administrator's Guide - Kerio Software Archive
User Accounts and Groups Search The Search engine can be used to filter out user accounts meeting specified criteria. The searching is interactive — each symbol typed or deleted defines the string which is evaluated immediately and all accounts including the string in either Name, Full name or Description are viewed. The icon next to the entry can be clicked to clear the filtering string and display all user accounts in the selected domain (if the Search entry is blank, the icon is hidden). The searching is helpful especially when the domain includes too many accounts which might make it difficult to look up particular items. Hiding / showing disabled accounts It is possible to disable accounts in Kerio Control. Check the Hide disabled user accounts to show only active (enabled) accounts. Account template Parameters shared by the most accounts can be defined by a template. Templates simplify administration of user accounts — shared parameters are set just once, when defining the template. It is also possible to configure some accounts (such as administrator accounts) separately, without using the template. Templates apply to specific domains (or to the local user database). Each template includes parameters of user rights, data transfer quota and rules for content rules (for detailed description of all these parameters, refer to chapter 16.2). Local user accounts If the Local user database is selected in the Domain item, user accounts in Kerio Control are listed (complete information on these accounts are stored in the Kerio Control configuration database). The following options are available for accounts in the local database: Add, Edit, Remove Click Add, Edit or Remove to create, modify or delete local user accounts (for details, see chapter 16.2). It is also possible to select more than one account by using the Ctrl and Shift keys to perform mass changes of parameters for all selected accounts. Importing accounts from a domain Accounts can be imported to the local database from the Windows NT domain or from Active Directory. Actually, this process includes automatic copying of domain accounts (account authenticating at the particular domain) to newly created local accounts. For detailed information about import of user accounts, refer to chapter 16.3. Import of accounts is recommended in case of the Windows NT domain. If Active Directory domain is used, it is recommended to use the transparent cooperation with Active Directory (domain mapping — see chapter 16.4). 216
16.2 Local user accounts Accounts mapped from the Active Directory domain If any of the Active Directory domain is selected as Domain, user accounts in this domain are listed. Edit User For mapped accounts, specific Kerio Control parameters can be set (refer to chapter 16.2). These settings are stored in the Kerio Control’s configuration database. Information stored in Active Directory (username, full name, email address) and authentication method cannot be edited. Note: It is also possible to select more than one account by using the Ctrl and Shift keys to perform mass changes of parameters for all selected accounts. In mapped Active Directory domains, it is not allowed to create or/and remove user accounts. These actions must be performed in the Active Directory database on the relevant domain server. It is also not possible to import user accounts — such an action would take no effect in case of a mapped domain. 16.2 Local user accounts Local accounts are accounts created in the Kerio Control or imported from a domain. These accounts are stored in the Kerio Control configuration database (see chapter 25.2). These accounts can be useful especially in domainless environments or for special purposes (typically for the firewall’s administration). Regardless on the method used for creation of the account, each user can be authenticated through the Kerio Control’s internal database, Active Directory or Windows NT domain. The basic administrator account (Admin) is created during the Kerio Control installation process. This account has full administration rights. Warning: 1. All passwords should be kept safe and secret, otherwise they might be misused by an unauthorized person. 2. If all accounts with full administration rights are removed and you logout from the Kerio Control administration, it is not possible to connect to the Kerio Control administration any longer. Under these conditions, a local user account (Admin with a blank password) will be created automatically upon the next start of the Kerio Control Engine. 3. Provided that you forget your administration password, contact the Kerio Technologies technical support (see chapter 26). 217
- Page 165 and 166: 12.1 Web interface and certificate
- Page 167 and 168: 12.2 User authentication at the web
- Page 169 and 170: Chapter 13 HTTP and FTP filtering K
- Page 171 and 172: 13.2 URL Rules Rules in this sectio
- Page 173 and 174: 13.2 URL Rules for example a rule a
- Page 175 and 176: 13.2 URL Rules • A page informing
- Page 177 and 178: 13.3 Content Rating System (Kerio W
- Page 179 and 180: 13.3 Content Rating System (Kerio W
- Page 181 and 182: 13.4 Web content filtering by word
- Page 183 and 184: 13.4 Web content filtering by word
- Page 185 and 186: 13.5 FTP Policy Weight Word weight
- Page 187 and 188: 13.5 FTP Policy Open the General ta
- Page 189 and 190: 13.5 FTP Policy Scan content for vi
- Page 191 and 192: 14.2 How to choose and setup antivi
- Page 193 and 194: 14.2 How to choose and setup antivi
- Page 195 and 196: 14.3 HTTP and FTP scanning Warning:
- Page 197 and 198: 14.3 HTTP and FTP scanning Use the
- Page 199 and 200: 14.4 Email scanning If only an aste
- Page 201 and 202: 14.4 Email scanning Figure 14.9 Set
- Page 203 and 204: 14.5 Scanning of files transferred
- Page 205 and 206: 15.2 Time Ranges Figure 15.2 IP gro
- Page 207 and 208: 15.3 Services Figure 15.4 Time rang
- Page 209 and 210: 15.3 Services Protocol The communic
- Page 211 and 212: 15.4 URL Groups Note: 1. Generally,
- Page 213 and 214: 15.4 URL Groups Examples:: • www.
- Page 215: 16.1 Viewing and definitions of use
- Page 219 and 220: 16.2 Local user accounts Name Usern
- Page 221 and 222: 16.2 Local user accounts Step 3 —
- Page 223 and 224: 16.2 Local user accounts Figure 16.
- Page 225 and 226: 16.2 Local user accounts Within thi
- Page 227 and 228: 16.3 Local user database: external
- Page 229 and 230: 16.4 User accounts in Active Direct
- Page 231 and 232: 16.4 User accounts in Active Direct
- Page 233 and 234: 16.4 User accounts in Active Direct
- Page 235 and 236: 16.5 User groups Note: In case of u
- Page 237 and 238: 16.5 User groups Using the Add and
- Page 239 and 240: Chapter 17 Administrative settings
- Page 241 and 242: 17.3 Update Checking Figure 17.2 Tr
- Page 243 and 244: 17.3 Update Checking Last update ch
- Page 245 and 246: 18.1 Routing table Route Types The
- Page 247 and 248: 18.2 Universal Plug-and-Play (UPnP)
- Page 249 and 250: 18.3 Relay SMTP server 18.3 Relay S
- Page 251 and 252: Chapter 19 Status Information Kerio
- Page 253 and 254: 19.1 Active hosts and connected use
- Page 255 and 256: 19.1 Active hosts and connected use
- Page 257 and 258: 19.1 Active hosts and connected use
- Page 259 and 260: 19.2 Network connections overview
- Page 261 and 262: 19.2 Network connections overview F
- Page 263 and 264: 19.4 Alerts • Session duration.
- Page 265 and 266: 19.4 Alerts • Connection failover
16.2 Local user accounts<br />
Accounts mapped from the Active Directory domain<br />
If any of the Active Directory domain is selected as Domain, user accounts in this domain are<br />
listed.<br />
Edit User<br />
For mapped accounts, specific <strong>Kerio</strong> Control parameters can be set (refer to chapter 16.2).<br />
These settings are stored in the <strong>Kerio</strong> Control’s configuration database. Information<br />
stored in Active Directory (username, full name, email address) and authentication<br />
method cannot be edited.<br />
Note: It is also possible to select more than one account by using the Ctrl and Shift<br />
keys to perform mass changes of parameters for all selected accounts.<br />
In mapped Active Directory domains, it is not allowed to create or/and remove user accounts.<br />
These actions must be performed in the Active Directory database on the relevant domain<br />
server. It is also not possible to import user accounts — such an action would take no effect<br />
in case of a mapped domain.<br />
16.2 Local user accounts<br />
Local accounts are accounts created in the <strong>Kerio</strong> Control or imported from a domain.<br />
These accounts are stored in the <strong>Kerio</strong> Control configuration database (see chapter 25.2).<br />
These accounts can be useful especially in domainless environments or for special purposes<br />
(typically for the firewall’s administration).<br />
Regardless on the method used for creation of the account, each user can be authenticated<br />
through the <strong>Kerio</strong> Control’s internal database, Active Directory or Windows NT domain.<br />
The basic administrator account (Admin) is created during the <strong>Kerio</strong> Control installation<br />
process. This account has full administration rights.<br />
Warning:<br />
1. All passwords should be kept safe and secret, otherwise they might be misused by an<br />
unauthorized person.<br />
2. If all accounts with full administration rights are removed and you logout from the <strong>Kerio</strong><br />
Control administration, it is not possible to connect to the <strong>Kerio</strong> Control administration<br />
any longer. Under these conditions, a local user account (Admin with a blank password)<br />
will be created automatically upon the next start of the <strong>Kerio</strong> Control Engine.<br />
3. Provided that you forget your administration password, contact the <strong>Kerio</strong> Technologies<br />
technical support (see chapter 26).<br />
217
Change language