Managing NerveCenter - Managing NerveCenter Security - Managing Security on Windows - Adding Users to a NerveCenter Installed on a Windows Workstation or Server -
Managing Security on Windows      Troubleshooting: Managing NerveCenter Security

Adding Users to a NerveCenter Installed on a Windows Workstation or Server

This section describes how to add users to NerveCenter groups if you install NerveCenter on a Windows workstation or server. If NerveCenter is installed instead on a Windows domain controller, see Adding Users to a NerveCenter Installed on a Windows Domain Controller.

Use the following guidelines when adding users to groups:

• Add NerveCenter administrators to the ncadmins group. See The Role of a NerveCenter Administrator on page 30.
• Add NerveCenter users to the ncusers group. NerveCenter users will only use the NerveCenter Client to monitor networks. See NerveCenter Login Rights on page 28 for a more detailed discussion of permissions.

Remember, once you add users to a group, they must log out and log back in for changes to take effect.

 
  To add users to the local groups:

  Use Windows User Manager to add your users to one of the two local groups to make sure they have the correct advanced user rights to use NerveCenter.

---

   You must have Administrator rights on your local machine to add users to local groups.

---

 
  To create global groups that are members of the local groups:

1. On the primary domain controller, create one more global groups with the following advanced user rights:
   • Act as part of the operating system
   • Log on as batch
2. Use Windows User Manager for Domains to add your users to one of the two global groups.

   ---

      You must have Domain Admin rights to add users to the global groups.

   ---

3. Add these global groups as members of the NerveCenter Admins and NerveCenter Users groups on each local machine that is running a NerveCenter Server.

   Instead of global groups, you could add each of your users to the groups on each of the local machines manually. However, for convenience, we recommend using the global groups.

   ---

      You must have Administrator rights on the local machine to add users to the local groups.

   ---

 
  If some of your users are on another domain, follow these additional steps:

1. Add each user to one of the NerveCenter global groups on the domain to which the NerveCenter Server belongs.

   Doing this ensures that those users have the correct advanced user rights.

   ---

      You must have Domain Admin rights to add users to the global groups. You must also set up a two-way trust relationship between the two domains. See your Windows documentation for more information.

   ---

2. Tell your users to specify their domain along with their user IDs whenever NerveCenter prompts them for their user ID.

The NerveCenter Server authenticates users first by evaluating which group they belong to and then by evaluating the validity of their Windows user ID and password.

Adding Users to a NerveCenter Installed on a Windows Domain Controller

This section describes how to set up the NerveCenter groups and membership in those groups if you install a NerveCenter Server on a Windows domain controller. If the NerveCenter Server is on a Windows workstation or server instead, see Adding Users to a NerveCenter Installed on a Windows Workstation or Server.

Use the following guidelines when adding users to groups:

• Add NerveCenter administrators to the ncadmins group. See The Role of a NerveCenter Administrator on page 30.
• Add NerveCenter users to the ncusers group. NerveCenter users will only use the NerveCenter Client to monitor networks. See NerveCenter Login Rights on page 28 for a more detailed discussion of permissions.

Remember, once you add users to a group, they must log out and log back in for changes to take effect.

If you install the NerveCenter Server on a Windows domain controller, Setup creates the global groups NerveCenter Admins and NerveCenter Users automatically.

 
  To set up users:

1. Use Windows User Manager for Domains to add your users to one of the two global groups.

   ---

      You must have Domain Admin rights to add users to the global groups.

   ---

2. Add these global groups as members of the NerveCenter Admins and NerveCenter Users groups on each local machine that is running a NerveCenter Server.

   ---

      You must have Administrator rights on the local machine to add users to the local groups.

   ---

 
  If some of your users are on another domain:

1. Add each user to the NerveCenter global groups on the domain to which the NerveCenter Server belongs.

   Doing this ensures that those users have the correct advanced user rights.

   ---

      You must have Domain Admin rights to add users to global groups. You must set up a two-way trust relationship between the two domains. See your Windows documentation for more information.

   ---

2. Tell your users to specify their domains along with their user IDs whenever they are prompted for User ID by NerveCenter.

The NerveCenter Server authenticates users first by evaluating which group they belong to and then by evaluating the validity of their Windows user ID and password.