Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Security Permissions

Updated: 21 May 2010 | 2 comments
Nhsnorm's picture
0 0 Votes
Login to vote

Have added a list of users to the Altiris Level1 Workers security group to allow them to use carbon copy. Remote control is ticked. However when a user tries to CC they get an error message saying they don't have sufficent network rights. If I add them into the Altiris Administrators group they then receive sufficient rights and can CC quite happily, but I don't want them in there. When removed from Admins, no CC again.



Can anyone explain why security rights don't seem to be applied from the lower security groups. I've restarted services but still no permissions given

Comments

jharings's picture
28
Oct
2008
0 Votes 0
Login to vote

Hello NHSNorm,

You need to adjust the scope permissions of the role. You have given the role permission to remote control, and the other half is the scope permission. Normally I describe this as "what you can do" - role vs. "who or what you can do it to" - scope. Depending on the version of the console (I'll describe the 6.0 'old' console), go to the tasks tab, and make sure the role has at a minimum read permissions to the Tasks -> Incident Resolution -> Tools -> Carbon Copy. They also need access to a computer report. This doc should help: https://kb.altiris.com/article...?article=34834&p=1



Let us know



Jim

Jim Harings
HP Enterprise Services
1st Rule of Connect Club: Mark the post that helped you the most as a 'solution'. 2nd Rule of Connect Club:You must talk about Connect club.

Nhsnorm's picture
29
Oct
2008
0 Votes 0
Login to vote

Jim,



Thanks.......



KB was a great help. CC now works through the console allowing the user to list the machines with CC agent on them. However, the users are currently using the desktop shortcut :



http://servername/Altiris/CarbonCopy/CarbonCopyFul...



When they click on "click on select" they still get the Access denied message. One answer would be to give them a connection to the console however as these are non IT users who just require a remote control connection, this is our prefered route.