Symantec Management Platform (Notification Server)

Have added a list of users to the Altiris Level1 Workers security group to allow them to use carbon copy. Remote control is ticked. However when a user tries to CC they get an error message saying they don't have sufficent network rights. If I add them into the Altiris Administrators group they then receive sufficient rights and can CC quite happily, but I don't want them in there. When removed from Admins, no CC again.

Can anyone explain why security rights don't seem to be applied from the lower security groups. I've restarted services but still no permissions given

Hello NHSNorm,
You need to adjust the scope permissions of the role. You have given the role permission to remote control, and the other half is the scope permission. Normally I describe this as "what you can do" - role vs. "who or what you can do it to" - scope. Depending on the version of the console (I'll describe the 6.0 'old' console), go to the tasks tab, and make sure the role has at a minimum read permissions to the Tasks -> Incident Resolution -> Tools -> Carbon Copy. They also need access to a computer report. This doc should help: https://kb.altiris.com/article...?article=34834&p=1

Let us know

Jim

Jim,

Thanks.......

KB was a great help. CC now works through the console allowing the user to list the machines with CC agent on them. However, the users are currently using the desktop shortcut :

http://servername/Altiris/CarbonCopy/CarbonCopyFull.aspx?Name=

When they click on "click on select" they still get the Access denied message. One answer would be to give them a connection to the console however as these are non IT users who just require a remote control connection, this is our prefered route.