Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 1 subscriber
  • Views 4836 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Role Base Administration

tedz

Hi,

I have a Central SEC with a domain Controller. I install a remote console with a same domain in other server. I configure remote console into a role or sub-estate, the user that i used member of:

 the Sophos Console Administrators group

the Distributed COM Users group

Be assigned to at least one Enterprise Console role.

Be assigned to at least one Enterprise Console sub-estate.

the Sophos DB Admins

when i run a remote Management Console into sub-estate that i configure on the Central SEC they will failed.

Link below is the sreenshot of remote console.

http://www.ge.tt/#!/2M460eJ/v/0

Can anyone help?

Thanks,

Teddy

:26281


This thread was automatically locked due to age.
  • 0

    Hi Christian,

    As you see the screenshot on the link below I configure the sub-state into one group of enterprise console to be run on remote console. When I run the remote console, I see all the groups of  the console. I confused of this of what happen.

    http://www.ge.tt/#!/1rhmTqJ/v/0

    Thanks,

    Tedz

    :26469
  • 0

    Hello tedz,

    still a mystery.

    To summarize: SOPHOS21 is you management server (and a DC) and has the IP 192.168.6.220 - correct? The server where you've installed the remote console is not (yet) protected by Sophos? User sophos1 is your Full Administrator and sophos2 should manage the sophos sub-estate? That is how I understand it.

    Now what do you see if you add sophos2 to the Sophos Full Administrator group, run the console (which will give you the full view) and go to Tools ... -> Select Active Sub-Estate ...? It should display both Default and sophos.

    Christian

    :26483
  • 0

    Hi Christian,

    Yes  your summarize are correct. When I  opend a remote console and go to Tools ... -> Select Active Sub-Estate ...? as u mentioned it displyed a default  only. How it works in remote console this sub-state? I'm following all the configuration, instructions and I get this problem. why?

    thanks,

    Tedz

    :26489
  • 0

    Hm ... so the error you get is insofar correct as you don't see a sub-estate other than Default.

    Just to avoid potential misconceptions: A remote console is functionally identical the one on the server. It's just the UI "front-end" running on a different machine. Roles and sub-estates are another thing. They work the same whether you run the console GUI on the management server or on a remote machine and are tied to a user or the group(s) the user belongs to - not to the machine which runs the GUI.

    Just can't see why there should be different sub-estates on the remote console. If you open Manage Roles and Sub-Estates ... on the remote console (either with the sophos1 user or sophos2 when it is Full Administrator) - do you see the same roles and sub-estates as on the management server? Or if you create a sub-estate using the remote console and then open Manage Roles and Sub-Estates ... on the management server - is the change reflected there?

    Christian

    :26497