サポートと今すぐチャット
サポートとのチャット

NetVault 13.0.3 - Administration Guide for Managed Service Providers

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault dashboard Managing jobs Monitoring logs Managing storage devices
Role-based access to manage storage devices Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Managing Tenant Monitoring events and configuring notifications Reporting in NetVault Working with client clusters Configuring default settings for NetVault
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring the reporting utility Configuring NetVault WebUI default settings Configuring NetVault to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault processes Environment variables Network ports used by NetVault Troubleshooting
Common errors Safe Mode in NetVault

Managing AD users

The following list identifies what various users can and cannot do within NetVault as it pertains to Active Directory (AD):

•
When an AD user logs in using an AD login, such as a domain name followed by the user name or a name that contains the @ symbol, NetVault authenticates the login against Active Directory. This behavior lets an AD user log in to NetVault even without a local NetVault account.
•
If authentication succeeds and this is the first time that the user is logging in, NetVault takes one of the following actions:
•
If a corresponding AD group exists in NetVault, NetVault adds the user and assigns the user the privileges, access levels, and notification settings that are defined for the corresponding AD group.
•
If the user does not have a NetVault account, NetVault adds the user but excludes all privileges, access levels, and notification settings. When the local NetVault Administrator logs in, the administrator can view the AD user entry and assign the applicable privileges.
•
NetVault automatically fetches the respective user details from the domain controller and stores it locally in the NetVault database. In case of secure mode, the details are fetched from domain controller and overwritten in the NetVault database on every successful login.
 
•
If authentication fails, NetVault displays an error message and prevents the user from logging in.
•
All NetVault MSP administrators can view all local and AD NetVault users.
•
An AD NetVault user with administrative privileges can add authenticated AD users; a local NetVault Administrator cannot.
•
An AD NetVault user with administrative privileges can rename an existing NetVault user to an authenticated AD NetVault user; a local NetVault Administrator cannot. You must ensure that the password fields remains empty to maintain the integrity of the user’s AD password.
•
Once the AD user is added in NetVault, it cannot be renamed to any other user name.
•
No one can change an AD user’s password or set the password to use the Password never expires option.
•
A local NetVault Administrator or an AD NetVault user with administrative privileges can change user-based information that is accessed by using the Modify Details option as this information is stored in the NetVault Database. However, if the secure mode is enabled, the NetVault administrator and other users are allowed to edit or change only E-mail 2 and E-mail 3 of an AD NetVault user.
* 
NOTE: On Windows based NetVault Server, if the Workstation attribute is set for a user in the AD database, then NetVault fetches that information and stores it against the Workstation in the user details. If the user has multiple workstations, they display as separated by commas. If you want the AD user with the Workstation attribute set in AD to log in to the NetVault Server, then the user must specify the NetVault Server in the AD Workstations list.

On Linux-based NetVault Server, the workstation field cannot be fetched, hence the user is unable to login. We recommended that workstation should not be set in AD for Linux Server.

An administrator can perform the following tasks in NetVault:

•
Adding an AD user
•
Deleting an AD user

Adding an AD user

The preferred method of adding an AD user is for the applicable user to log in and let NetVault complete the authentication process.

When you add an AD user to the NetVault Server, NetVault automatically fetches the respective user information from AD and populates it in the NetVault user details.

Deleting an AD user

A local NetVault Administrator or an AD NetVault user with administrative privileges can remove an AD user from NetVault. This does not affect the user’s account in Active Directory; it only removes the user from the NetVault Database. Whereas, MSP administrator is not permitted to delete any tenant user, the tenant administrator can only delete tenant user/s.

1
In the Navigation pane, click Users and Groups.
2
On the Manage User Accounts and User Groups page, select the user account that you want to remove, and click Delete.
 
3
In the confirmation dialog box, click Delete.

Managing AD groups

The following list identifies what various users can and cannot do within NetVault as it pertains to AD user groups:

•
An MSP NetVault Administrator can search, list, update, and delete existing NetVault AD groups. However, this administrator cannot list AD groups that have not been added from Active Directory.
•
An AD NetVault user with administrative privileges can search, list, update, and delete existing NetVault AD groups. This administrator can also list AD groups that have not been added from Active Directory yet and can add AD groups to NetVault.
•
NetVault users who do not have administrative privileges cannot perform any tasks related to AD groups in NetVault.
•
While renaming NetVault user to AD user all the privileges of NetVault user will be assigned to new AD user along with the privileges of NetVault AD groups.
•
As stated previously, a new AD user can log in to NetVault, and NetVault automatically authenticates the login. If authentication succeeds, NetVault assigns the user the privileges that are defined for the corresponding AD group.
 
* 
IMPORTANT: If you manually add an AD user instead of using the automated authentication process, the corresponding privileges that are defined for the user’s AD group are automatically assigned.
•
If the AD user has an existing local NetVault account, all privileges from that account are assigned to the user when the account is redefined as an AD user account. The privileges defined for the corresponding AD group are also assigned to the redefined account.

An administrator can perform the following tasks in NetVault:

•
Adding an AD group to NetVault Server
•
Viewing a list of AD groups that exist in NetVault
•
Modifying description of added AD group in NetVault
•
Deleting an AD group that was added to NetVault
関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択