Chat now with support
Chat with Support

KACE Systems Management Appliance 10.0 Common Documents - Administrator Guide

About the KACE Systems Management Appliance (SMA) Getting started
Configuring the appliance
Requirements and specifications Power-on the appliance and log in to the Administrator Console Access the Command Line Console Tracking configuration changes Configuring System-level and Admin-level General Settings Configure appliance date and time settings Enable Two-Factor Authentication for all users Verifying port settings, NTP service, and website access Configuring network and security settings Configuring Agent settings Configuring session timeout and auto-refresh settings Configuring locale settings Configuring the default theme Configure data sharing preferences About DIACAP compliance requirements Configuring Mobile Device Access Enable fast switching for organizations and linked appliances Linking Quest KACE appliances Configuring history settings
Setting up and using labels to manage groups of items Configuring user accounts, LDAP authentication, and SSO Using Replication Shares Managing credentials Configuring assets
About the Asset Management component Using the Asset Management Dashboard About managing assets Adding and customizing Asset Types and maintaining asset information Managing Software assets Managing physical and logical assets Maintaining and using manual asset information Managing locations Managing contracts Managing licenses Managing purchase records
Setting up License Compliance Managing License Compliance Setting up Service Desk Configure the Cache Lifetime for Service Desk widgets Creating and managing organizations Importing and exporting appliance resources
Managing inventory
Using the Inventory Dashboard Using Device Discovery Managing device inventory
About managing devices Features available for each device management method About inventory information Tracking changes to inventory settings Managing inventory information Finding and managing devices Provisioning the KACE SMA Agent Manually deploying the KACE SMA Agent Using Agentless management Adding devices manually in the Administrator Console or by using the API Forcing inventory updates Managing MIA devices Obtaining Dell warranty information
Managing applications on the Software page Managing Software Catalog inventory
About the Software Catalog Viewing Software Catalog information Adding applications to the Software Catalog Managing License assets for Software Catalog applications Associate Managed Installations with Cataloged Software Using software metering Using Application Control Update or reinstall the Software Catalog
Managing process, startup program, and service inventory Writing custom inventory rules
Deploying packages to managed devices
Distributing software and using Wake-on-LAN Broadcasting alerts to managed devices Running scripts on managed devices Managing Mac profiles Using Task Chains
Patching devices and maintaining security
About patch management Subscribing to and downloading patches Creating and managing patch schedules Managing patch inventory Managing Dell devices and updates Maintaining device and appliance security
Using reports and scheduling notifications Monitoring servers
Getting started with server monitoring Working with monitoring profiles Managing monitoring for devices Working with alerts
Using the Service Desk
Configuring Service Desk Using the Service Desk Dashboard Managing Service Desk tickets, processes, and reports
Overview of Service Desk ticket lifecycle Creating tickets from the Administrator Console and User Console Creating and managing tickets by email Viewing tickets and managing comments, work, and attachments Merging tickets Using the ticket escalation process Using Service Desk processes Using Ticket Rules Run Service Desk reports Archiving, restoring, and deleting tickets Managing ticket deletion
Managing Service Desk ticket queues About User Downloads and Knowledge Base articles Customizing Service Desk ticket settings Configuring SMTP email servers
Maintenance and troubleshooting
Maintaining the appliance Troubleshooting the KACE SMA
Appendixes Glossary About us Legal notices

Archive user accounts

Archive user accounts

When users are removed from your system, you have an option to archive their accounts prior to deleting them.

In order to archive user accounts, user archival must be enabled on the General Settings page. For more information, see Configure Admin-level or organization-specific General Settings.

Archived user accounts are maintained on the appliance in read-only mode. You can delete them, as needed. If you archive a user account, and add it to appliance again, a new user account is created, while the archived account is maintained until being removed. For example, if an employee leaves the organization and its user account becomes archived, if they join the organization again, a new user account is created without any association with the archived account. Similarly, if you archive a user account on the appliance without updating your organization's Active Directory, an LDAP import results in a new user account, that is not associated with the previously archived user.

* 
NOTE: When user archival is enabled, user accounts can only be deleted only if they are marked as archived.
1.
Log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
2.
On the left navigation bar, click Control Panel > Users.
3.
Complete one of the following steps:
◦
On the Users list, select one or more user accounts that you want to archive and select Choose Action > Archive.
◦
On the Users list, click the name of the user that you want to archive. On the User Detail page that appears, click Archive.
4.
In the dialog box that appears, click Confirm.
The dialog box closes, and the Users list refreshes, indicating that the user is in the Archived state ().
5.
If you want to review the details for an archived user, on the Users list, in the Name column, click the user name.
The User Details page appears, showing the user details in read-only mode.

Next, you can delete archived user accounts, if needed.

View or edit user profiles

View or edit user profiles

You can view general information about your user profile, and edit some settings, when needed.

The User Profile dialog box allows every user to quickly change their password, review the devices and assets assigned to them, and any Service Desk Tickets that they created. Users with administrative-level permissions can also edit some additional parameters, such as their name, email, manager, and locale. They can also quickly go to the User Detail page to review additional information about their account, and to make any changes, as needed.

For more information about editing user accounts using the User Detail page, see the following topics:

•
Add or edit organization user accounts
•
Add or edit System-level user accounts
1.
Do one of the following:
◦
Log in to the KACE SMA Administrator Console, https://KACE_SMA_hostname/admin, where KACE_SMA_hostname is the hostname of your appliance. Or, if Show organization menu in admin header is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
◦
Log in to the KACE SMA System Administration Console, https://KACE_SMA_hostname/system, where KACE_SMA_hostname is the hostname of your appliance, or select System from the drop-down list in the top-right corner of the page.
◦
Log in to the KACE SMA User Console, https://KACE_SMA_hostname/user, where KACE_SMA_hostname is the hostname of your appliance, or select User Console from the drop-down list in the top-right corner of the page.
2.
From the drop-down list in the top-right corner of the page, select My Profile.
The User Profile dialog box appears.
3.
Review and edit the information on the User Profile dialog box, as needed.
* 
NOTE: Users without administrative privileges can only update their passwords and view a limited set of information in this dialog box without making any additional changes or accessing the User Detail page.

Tab

Option

Description

Profile

Login

The name the user types in the Login ID field on the login page.

* 
NOTE: You cannot change the login of the default admin account.

Name

The user’s full name.

Primary Email

The user’s email address.

Manager

The user’s manager.

Locale

The locale to use for the Administrator Console and User Console for the user.

Update Password

The password the user types when logging in.

If the Organization component is enabled on your appliance, or if you want to link multiple K-Series appliances, use caution when changing the password of the admin account. Admin account passwords for the System-level, for organizations, and for linked appliances must be the same if you want to switch among them using the drop-down list in the top-right corner. The drop-down list shows only those organizations and appliances whose admin account passwords are the same.

Devices

Name

The device name.

Subtype

The Asset Subtype for this device, if one is assigned.

Primary Device

Indicates if the device is the primary device for the selected user.

Assets

Name

The asset name.

Type

The asset type.

Subtype

The Asset Subtype for this device, if one is assigned.

Service Desk Tickets

Number

The number of the Service Desk ticket the user logged.

Title

The title of the Service Desk ticket the user logged.

Status

The status of the Service Desk ticket the user logged.

4.
Optional. To access the User Detail page, in the top-left corner, click View Full Profile, and continue reviewing and editing the user profile on that page.
* 
NOTE: This link only appears if your account has administrative privileges.
5.
To save your changes, click Update.

Using an LDAP server for user authentication

Using an LDAP server for user authentication

About the login account on your LDAP server
Configure and test LDAP user authentication

User authentication can be done locally, using accounts created on the KACE SMA, or externally, using an LDAP server.

If you use external LDAP server authentication, the appliance accesses a directory service to authenticate users. This allows users to log in to the appliance Administrator Console or User Console using their domain username and password.

For information about adding user accounts to the KACE SMA for local user authentication, see:

•
About user accounts and user authentication
•
Managing user accounts for organizations

About the login account on your LDAP server

About the login account on your LDAP server

To set up LDAP user authentication, you need to create a login account for the KACE SMA on your LDAP server. The KACE SMA uses this account to read and import user information from the LDAP server.

The account needs read-only access to the Search Base DN field on the LDAP server. The account does not need write access, because the appliance does not write to the LDAP server.

In addition, the account must have a password that never expires. Because the password never expires, make sure it is very secure. The user can change the password (that complies with the appropriate security requirements), however, the password must be updated in the KACE SMA. You can give the account a username, such as KACE_Login, or you can attempt to connect to the LDAP server using an anonymous bind.

Related Documents