Can the activation of layers be conditional based on user rights?
Updated: 29 Jul 2010 | 7 comments
Q:
Chris asked: Can we tie the activation of a layer to the logged-in user? As an example, a layer (say Project) exists on a PC, and if I log in, it gets activated, but if you log in it does not.
A:
Hi Chris. Today, what you've described can be done with login scripts. We have several beta customers who are doing just that. Eventually, we'll natively expose packages based on who is logged in (including on multi-user machines such as Citrix).
blog entry Filed Under:
About Endpoint Virtualization Community Blog
The Endpoint Virtualization Community Blog is the perfect place to share short, timely insights including product tips, news and other information relevant to the Endpoint Virtualization community. Any authenticated Connect member can contribute to this blog.
Filter by:
Blog Tags
Workspace Virtualization Best Practice Configuring Endpoint Virtualization Suite Basics Windows Virtualization Workspace Streaming Tip/How to Altiris Deployment Solution Workspace Corporate Compatibility Installing Altiris Client Management Suite News Workspace Remote Reporting Upgrade Wise Packaging Performance Features USB Swiss Army Tool Altiris Server Management Suite Symantec Management Platform (Notification Server) Altiris IT Asset Management
Comments
Examples please !!!!
Would be nice to have an example especially when users aren't local admin on their system.
==============
Faith in Chaos
Examples Vary...
I use this exact system on the machines that I am experimenting on. The issue of examples is it is a matter of what you use as a login script. For example, we use Auto-It v3 for that type of scripting so for us it would be...
If @UserName = "Nightgaunt" Then
Run ('svscmd.exe "MYSQL ADMIN" A', @DesktopDir, @SW_HIDE)
EndIf
Simple, just executes the program for MYSQL ADMIN if the user logging in is Nightgaunt. Because it just runs off the old command line it is practically limitless in options.
Also it is practically limitless in what you use to execute, VB, WinBatch, whatever is used can be automated provided the language has the ability to capture the USER who is logging in to the machine.
Permissions
Are all your users local admins then?
Or am I missing something here?
==============
Faith in Chaos
Users have different packages on the same machine
LS,
I use a alway's activate all packages on the machine, but I take out the shortcut in the start menu and on the desktop.
All my users are only have user rights.
In the startmenu the right shortcuts are placed by using the Active directory rights.
Is a user a AD appname user, then the shortcut is in his menu. If he is not, the shortcut is not there.
This is the far simple way to face this without giving admin rights to users.
Regards Erik www.DinamiQs.com Dinamiqs is the home of VirtualStorm (www.virtualstorm.org)
*************************************************************
If your issue has been solved, Please mark it as solved
***********
Interactive layer activation by users without local admin rights
What I've been trying to do, is give users the right to use a gui (Trinket maybe) to activate and deactivate programs.
Would there be a way, or does it have to be done with scripts or shortcuts?
Sure is
If you give your users read access to the following registry keys
HKLM\System\Altiris\FSL\Rights\Activate
HKLM\System\Altiris\FSL\Rights\Deactivate
You can give them activate and deactivate rights respectively. You might need to create these keys if they don't already exist.
After setting these rights your users will be able to use and of the SVS tools (SVS Admin, Trinket, etc.) to activate or deactivate the layers.
User Based SVS control with Scense
The Scense integration with SVS allows central user based management of SVS.
Please look at www.scense.com
Would you like to reply?
Login or Register to post your comment.