NetVault 13.0.1 - Administration Guide

A local NetVault Administrator or an AD NetVault user with administrative privileges can change user-based information that is accessed by using the Modify Details option as this information is stored in the NetVault Database. However, if the secure mode is enabled, the NetVault administrator and other users are allowed to edit or change only E-mail 2 and E-mail 3 of an AD NetVault user.


	NOTE: On Windows based NetVault Server, if the Workstation attribute is set for a user in the AD database, then NetVault fetches that information and stores it against the Workstation in the user details. If the user has multiple workstations, they display as separated by commas. If you want the AD user with the Workstation attribute set in AD to log in to the NetVault Server, then the user must specify the NetVault Server in the AD Workstations list. On Linux-based NetVault Server, the workstation field cannot be fetched, hence the user is unable to login. We recommended that workstation should not be set in AD for Linux Server.

An administrator can perform the following tasks in NetVault:

•

Adding an AD user

•

Deleting an AD user

Adding an AD user

The preferred method of adding an AD user is for the applicable user to log in and let NetVault complete the authentication process. However, if you have the applicable privileges, at a minimum, you must have the Users — Administer user accounts privilege, you can manually add the user, where it will also consider the privileges defined to selected user before renaming to AD user.

When you add an AD user to the NetVault Server, NetVault automatically fetches the respective user information from AD and populates it in the NetVault user details. However, on Linux-based NetVault Server, user details are fetched only after the first login and not if the AD user is added manually. On windows based NetVault Server, when you add users manually, the privileges defined for the AD group to which the user belongs are automatically assigned. If the user has an existing local NetVault account, the privileges defined for that account are taken into consideration by NetVault before redefining the local user as an AD user. For more information on adding, updating, and deleting user accounts, see Creating a user account, Modifying a user account, and Deleting a user account.

In the Navigation pane, click Users and Groups.

On the Manage User Accounts and User Groups page, click Add User.

Select the user on Manage User Accounts and User Groups page and click Modify Details.

Enter the AD user name in the <domain>\<name> (For example, domain\username) or <name>@<domain> (For example, username@domain.com) format, and click Apply.

Deleting an AD user

A local NetVault Administrator or an AD NetVault user with administrative privileges can remove an AD user from NetVault. This does not affect the user’s account in Active Directory; it only removes the user from the NetVault Database.

In the Navigation pane, click Users and Groups.

On the Manage User Accounts and User Groups page, select the user account that you want to remove, and click Delete.


	NOTE: You can select multiple user accounts to delete at one time.

In the confirmation dialog box, click Delete.

Managing AD groups

The following list identifies what various users can and cannot do within NetVault as it pertains to AD user groups:

•

A NetVault Administrator can search, list, update, and delete existing NetVault AD groups. However, this administrator cannot list AD groups that have not been added from Active Directory.

•

An AD NetVault user with administrative privileges can search, list, update, and delete existing NetVault AD groups. This administrator can also list AD groups that have not been added from Active Directory yet and can add AD groups to NetVault.

•

NetVault users who do not have administrative privileges cannot perform any tasks related to AD groups in NetVault.

•

While renaming NetVault user to AD user all the privileges of NetVault user will be assigned to new AD user along with the privileges of NetVault AD groups.

•

As stated previously, a new AD user can log in to NetVault, and NetVault automatically authenticates the login. If authentication succeeds, NetVault assigns the user the privileges that are defined for the corresponding AD group.


	IMPORTANT: If you manually add an AD user instead of using the automated authentication process, the corresponding privileges that are defined for the user’s AD group are automatically assigned.

•

If the AD user has an existing local NetVault account, all privileges from that account are assigned to the user when the account is redefined as an AD user account. The privileges defined for the corresponding AD group are also assigned to the redefined account.

An administrator can perform the following tasks in NetVault:

•

Adding an AD group to NetVault Server

•

Viewing a list of AD groups that exist in NetVault

•

Modifying description of added AD group in NetVault

•

Deleting an AD group that was added to NetVault