Endpoint Protection

Hi all,

I have 4 Domains/sites that I manage but each Domain have its own admin to manage their own site.

When one of these admin logs on to their own domain, they see the WHOLE sites of computers, servers, etc and not their own domain/site within the 'Home' tab. I can't find a way to restrist them to see their own domain/site.

Have I missed a settings somewhere to enable this or is there no way of doing this?

Thanks,

You just need to set them up accordingly in the Site Rights under the Admin page

About administrator account roles and access rights

Home page will show all the clients not limited to Domains.

Thanks. Turns out that once you've made an account an Admin, you lose the 'Access Rights' tab. Only way to resolve this is to DELETE the account and then re-create the account with the Access Rights set up.

Seems a bit overkill! :D

HOWEVER... when I have done that, I did a full sync (replication) and then did a test logon (including typing in the correct Domain) to another site - it states that the administrator user ID and password is incorrect. :/ This worked fine when I had the ID as the full admin...

Any ideas?

Cheers,

Tony

Thanks for the reply. That's a shame. I assume the limited admin will be able to see all clients AND manage them, even that they are not part of other sites?

I still however am having issue with logging into it (see my other post) - any ideas?

Cheers

You can raise a request under the ideas section,more the votes, more sooner it will be implimented

https://www-secure.symantec.com/connect/security/ideas

Whats the SEPM version you are running? If you have multiple domains with in sepm with AD authnetication it is possible that u get authentication failure. 

when you used AD test for connectivity, was it successful?

If nothing works, Call up support .... I hope that's our last chance.

Thanks for the reply. Answers to your question:

>> Whats the SEPM version you are running?

v12.1.5 (RU5)

>> Multipie domains?

Yes

>> when you used AD test for connectivity, was it successful?

Yes, it was a successful test for AD. But when I try to login, it fails. Error log does not state why. Just 'Incorrect ID & password' even that I know the ID/password is correct.

If I get nowhere with this, I will raise a call.

Cheers

I specified it by using the SEPM Domain name.

can you check if that user id is disabled in AD? 

since you have multiple domains, can you please verify if you have added ( test user domain) necessary domains inside SEPM.

Do you have domains in SEPM?

Tony, 

Is it possible to remove the Domains & then try logging in. 

Also, create a sepm account with full admin rights.. Try to login

Then, change the authentication mode.. and check

This is now resolved. It looks like there were some error messages in related to folder permissions on the C drive after the upgrade to v12.1.5.

I ran the wizard and got it to recreate everything and they now works, including the logging in. Don't know if it's related but it works and I'm happy now. :D

Thanks all!

Further tweaking, it DOES allow me to specifiy which site for the person to see.

Access Rights -> Limited Admin -> Site Rights -> pick the domain.

Now when this person logs on, they will see ONLY their clients within the Home Page. Which is great news!