Console One 1.3.6h Question

Question

Greetings,
I want two members of our staff to be able to add and delete names as user come and go (we are a K-12 school). At the present, the only way they can do the job is to enable them to have security like an admin.
This isn't good because I need to create a couple of "high-level" folders and if these two have admin privileges, it defeats the purpose of creating a secure environment.
Is there a way to make it so that access is limited on Console One (we are running the latest version like that came with the upgrade to Netware 6.5 sp 8) or will I need to use iManager. If I have to use iManager, how do I go about seeing up limited permissions.
Thanks,
Kevin

Answer 1

Also factor in that when you use an Inherited Rights Filter (IRF) you cannot filter out the "Supervisor" right so its best not to use it unless you absolutely need to or you are troubleshooting something. Your designated administrators will be able to do what ever they need to do with create and delete rights. Avoid "Add Self" as well unless you really understand how it works as it could leave you with security issues to handle after the fact.
Its also tempting to assign read and compare rights to "All Attributes". This makes many delegated administrative tasks easier but if you keep secure information in your tree like SSNs you won't want unauthorized users having access to them.
Also, always test your work by assessing the effective rights one object has to another when you're done to ensure you get the expected results.
Lawrence Kearney
Experienced NetWare Administrator
Location to be determined
Lawrence Kearney