This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Role Base Administration

Hi,

I have a Central SEC with a domain Controller. I install a remote console with a same domain in other server. I configure remote console into a role or sub-estate, the user that i used member of:

 the Sophos Console Administrators group

the Distributed COM Users group

Be assigned to at least one Enterprise Console role.

Be assigned to at least one Enterprise Console sub-estate.

the Sophos DB Admins

when i run a remote Management Console into sub-estate that i configure on the Central SEC they will failed.

Link below is the sreenshot of remote console.

http://www.ge.tt/#!/2M460eJ/v/0

Can anyone help?

Thanks,

Teddy

:26281


This thread was automatically locked due to age.
Parents
  • Hm ... so the error you get is insofar correct as you don't see a sub-estate other than Default.

    Just to avoid potential misconceptions: A remote console is functionally identical the one on the server. It's just the UI "front-end" running on a different machine. Roles and sub-estates are another thing. They work the same whether you run the console GUI on the management server or on a remote machine and are tied to a user or the group(s) the user belongs to - not to the machine which runs the GUI.

    Just can't see why there should be different sub-estates on the remote console. If you open Manage Roles and Sub-Estates ... on the remote console (either with the sophos1 user or sophos2 when it is Full Administrator) - do you see the same roles and sub-estates as on the management server? Or if you create a sub-estate using the remote console and then open Manage Roles and Sub-Estates ... on the management server - is the change reflected there?

    Christian

    :26497
Reply
  • Hm ... so the error you get is insofar correct as you don't see a sub-estate other than Default.

    Just to avoid potential misconceptions: A remote console is functionally identical the one on the server. It's just the UI "front-end" running on a different machine. Roles and sub-estates are another thing. They work the same whether you run the console GUI on the management server or on a remote machine and are tied to a user or the group(s) the user belongs to - not to the machine which runs the GUI.

    Just can't see why there should be different sub-estates on the remote console. If you open Manage Roles and Sub-Estates ... on the remote console (either with the sophos1 user or sophos2 when it is Full Administrator) - do you see the same roles and sub-estates as on the management server? Or if you create a sub-estate using the remote console and then open Manage Roles and Sub-Estates ... on the management server - is the change reflected there?

    Christian

    :26497
Children
No Data