Instruction/ maintenance manual of the product 4.5.X Microsoft
Go to page of 94
Lieberman Software Corporatio n - 1900 Ave of the Stars, Suite 425, Los A ngeles, CA 90067 Voice: 800.829.6263 (USA /Canada) Voice: (01) 310.550 .8575 (Worldwide) Fax: (01) 310.550.1152 ( Worldwide) Web: www.liebsoft.co m Email: support@liebsoft.com Account Rese t Co nsole Adminis tration Guide Revision: May 31, 2007 – For Software Version 4.
Page 2 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Table of Contents Copy right N oti ce ......................................................................................................
Page 3 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Sche duli ng tas ks [Ad van ced] .............................................................................................. 27 Confi gurin g li censi ng [Ad v anced ] .
Page 4 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Addi ng Repo rts ................................................................................................................... 39 Runn ing Rep orts Immed ia tely .
Page 5 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Addi ng Acce ss R ights ......................................................................................................... 53 View ing or Del eting Exi stin g Acce ss Ri ghts.
Page 6 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Overv iew ............................................................................................................................. 65 View ing Av ai lable D ata Source s .
Page 7 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Setti ng th e De fault D om ain .............................................................................................. 76 Appl icati on Se curity .
Page 1 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Copyrigh t Notice Copyright © 2005-2007 Lieberman Softw are Corporation.
Page 2 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved License A greeme nt This is a legal and binding contract be tween you, the end user, and Lieberman So ftware Corporation. By using thi s software, you agree to be bound by the terms of this agreement.
Page 3 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Countr y of Origin This software was dev eloped entirely in the United States of America .
Page 4 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Limited W arranty The media (optional) and manual that make up this software are w arranted by Lieberman Software Corporation to be free of defects in materials and workmanship for a period of 30- days from the date of yo ur purchase.
Page 5 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Pre-Usag e Conside rations Please ensure that you hav e completed all steps in the appropriate installa tion checklist before you begin attempti ng to manage the Account Reset Console.
Page 6 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Welcome to the A cc ount Res et Cons ole Thanks for using the A ccount Reset Console! Tha.
Page 7 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved 1. Corporate Logo – your corporate logo can be put here instead of the Liebe rman Software logo. 2. Tagline – your own tagline can be used here.
Page 8 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved Once you log into the Account Reset Console you should see a series of t op-level menu options which look similar to the ones below .
Page 9 of 94 - Administrat ion Manual - Copyright 2007 - Lieberman Software Cor poration - All Rights Reserved The top-level menus represent di fferent parts of the ARC W eb product: • A ccounts – t his menu c ontains the direct account manipul ation pages.
Page 10 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Configuring the A cco unt Reset Console Overview Once you have installed and logged into the Account Reset Console, there are a few steps you will need to take to configure the tool to function properly w ith your network.
Page 11 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Add your groups by entering their group name (and domain, if appropriate ) into the entry fields and clicking “Add SuperUsers” for each one.
Page 12 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Configuring managed domains Once you have entered your selected super-user groups it is time to configu re the specific domains that the Account Reset Console w ill be able to manage.
Page 13 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Setting up data sources and logging Account Reset Console 4.X requi res Microsoft MSDE /SQL Express or SQL Server 2000/2005 or later for logging and user veri fication purposes.
Page 14 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved You can select any data source as yo ur log destination using the dropdow n box on this page. The Account Reset Consol e will reject your choice if you select a non-S QL Server data source.
Page 15 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved A ccount Reset Feature s.
Page 16 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The Account Reset features allow you to configure what operations Help Desk personnel can perform on accounts they are resetting. By default, the options should allow all actions on the account.
Page 17 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Configuring email If you want the Account R eset Console to be able to noti fy users vi.
Page 18 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Setting up group permissions The final step before you be gin using the basic features of the Account Reset Console is to delegate login and account reset permissions to your chosen groups.
Page 19 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • Allow W eb Logon: All ows users to log onto the Account Reset Console to reset their own passw ords or c onfigure veri f ication answers.
Page 20 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Only by setting BOTH the “Allow Reset of Other Users’ Accounts” pro gram access level AND the appropriate group access rule w il l a help desk user be able to reset an other user’s account.
Page 21 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved You will begin configuring the verification syste m at the “Verification” side menu tab in the “Configuration” main menu section .
Page 22 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The Account Reset Consol e allows you to design and use your ow n SQL queries, and thus configure your verification system to access any database you may alrea dy be using for data storage.
Page 23 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved to reset/unlock their accounts w ithout requiring access to a browser or hel p desk personnel. For further information or to dow nload, please visit the Lieberman So ft war e web site at http://www.
Page 24 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The new button at the bottom of the login page allow s users t o answ er the selected questions to verify their identity and reset their pa sswords.
Page 25 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved W he n initially ev aluating the product, the defaults should suffice. The de f ault character set is designed to protect MS Access and SQL Server databases.
Page 26 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved All colors should be in hex adecimal RGB format. Thus, red woul d be FF0000 and green 00FF00 . All “0” characters should be ze ros, not o’s.
Page 27 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Setting up the mobile site [A d vanced] The Account Reset Consol e’s /Mobile site allows you to access any feature of the application from your mobile device with an optimiz ed download size and screen layout.
Page 28 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The list of active and inactive tasks is vi sible. Adding a new task to the inactiv e list is as simple as entering the task name and ty pe and clicking “Add Task”.
Page 29 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved.
Page 30 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved In the edit screen you can change the in terval, which groups and users it scans for, and what actions to take. You can find more information on scheduling tasks in the “ Scheduling Tasks and Reports” section later in this docu ment.
Page 31 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Changing Y our Ow n Passw ord Overview The Account Reset Consol e can allow users to reset their own passwords. Self-service password change is located under the “Accounts” menu item, in the “Change My Password” tab.
Page 32 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Resettin g User Acco unt s Overview The Account Reset Consol e can allow users to reset other user accounts. User account reset is located under the “Account s” menu item, in the “Reset User Accoun t” tab.
Page 33 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Account Re set Optio ns Not all options will necessarily be available, depending on how your system administrators have configured the Account Reset Console.
Page 34 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved To look up user information, enter the user’s username and domain and click “Look Up Answers”. The user accoun ts you are permitted to view may be restricted.
Page 35 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Setting Up Identity Information If the Account Reset Consol e is configured to allow us.
Page 36 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The Account Reset Consol e protects the data sources accessed by the verification system against intrusion by limiting the characte rs you can enter into the answer fields.
Page 37 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The Account Reset Consol e will display logs from the current logfile. Any l ogg ing information saved in a different log data source wi ll not be displayed.
Page 38 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Viewing the Action Log To view the Action Log, sel ect “Action Log”, enter the desired ran ge of dates and user account, and click “Display Log”.
Page 39 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Management reports are div ided into two classes: “Active” and “Inactiv e” reports.
Page 40 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • “Account inactivity ” – Select this report type to search for accoun t s whi ch have been inactive (have not logged in) for the specified number of days.
Page 41 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • Task Name – the name y ou use to refer to the report task. This name w ill be stored in the reports database so y ou can find the task output.
Page 42 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Report Viewing Options Scheduled task reports are saved in the current Account Reset Console log database. Any reports saved to a previous log database w ill not be available.
Page 43 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The report shows the name of the task and the date of the run, and then di splays a list of the users found, the actions taken, and the result of the action.
Page 44 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Creating and Viewing A ccount Tasks The scheduled account tasks that are currently save.
Page 45 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • “Password expiration” – Select this task type to search for accounts w it h passwords due to expire in the specified number o f days.
Page 46 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved.
Page 47 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • Task Name – the name y ou use to refer to the task. This name wi ll be stored in the reports database so you can find the task output.
Page 48 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Report viewi ng is located under the “Scheduling/Reporting” menu item, in the “View Task Results” tab. Reports can be view ed b y users with “Manage All W eb Access Controls” privileges.
Page 49 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The report shows the name of the task and the date of the run, a description o f the task, a summary, and then a list of the users found, the actions taken, and the resul t of the action.
Page 50 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Set Progra m Access Ri ght s Overview User groups can be allow ed t o login as normal users, allow ed to reset other user accounts, and/or allowed to m anage the Account Reset Console.
Page 51 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • A llow Web Logon – Thi s access right allows members o f the specified group to log onto the Account Reset C onsole through the web interface.
Page 52 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Set Grou p Access Rig ht s Overview User groups that are allow ed to reset other user accounts are strictly limited to resetting only accounts which they are permitted to af fect.
Page 53 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved members of the “can reset” group are permitted to r eset accounts o f users in the “can be reset“ group.
Page 54 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Set A c cou nt Reset Fea tures Overview The Account Reset Consol e can be configured to automatically change account flags during account reset or to allow the resetting user to select which flags to chan ge.
Page 55 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved.
Page 56 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • Reset Password through A ccount Reset Console – chec k this box to allow user passwords to be reset during accoun t reset.
Page 57 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Password Change Options You can change password change options by selecting the appropriate values and clicking the “Save Program Features” button.
Page 58 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved.
Page 59 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Configuring E mail Settings Overview The Account Reset Consol e can send emails to users notifying them that thei r accounts have been reset.
Page 60 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved • Server Name – Enter the name o f your email server here. The Account Reset Console will use this email (SM TP) server to send emails to users.
Page 61 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Appearance Overview The Account Reset Consol e can be fully “skinned” to integrate with your ex isting network portal infrastructure. You can sel ect colors and company banners to match your ow n t hemes.
Page 62 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Nearly all colors of the Account Reset Console can be altered at any time, as w ell as the banner and tagline at the top o f the page.
Page 63 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The background color of the menu ba r can be changed by entering a new value into the “Menu Bar Color” box. “Text Color” re fers to the inactive menu options; “Selected Text Color” refers to the active menu options.
Page 64 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Configuring Mobile S ettings Overview The Account Reset Consol e has a mobile site (available at the /Mobil e subdirectory) which can be configured to match nearly any mobile devi ce’s screen available.
Page 65 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Dat a S ources Overview The Account Reset Consol e can utilize any ADO-compatible data source as an information source for user identity veri fication or logging.
Page 66 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved o “ConnectionStr”: Refers to any other ADO-compatible database. Users mu st explicitly construct their ow n ADO connection string for this sort o f data source connection (see “Editing a Data Source,” below).
Page 67 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The Account Reset Consol e does not currently support DSN connections. Editing a M icrosoft J et Data Sour ce Microsoft Jet data sources are characte r ized by the ser ver install ation and database name.
Page 68 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Editing a Gen eral ADO-Compatible Data Sourc e General ADO-Compatible data sources are chara ct erized by an expl icit connection string.
Page 69 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Changing the Log Database You can select any working data source to set as the logging database. The Account Reset Console will not allow you to select a data source that it cannot confirm as functional.
Page 70 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved User verification configuration is located unde r the “Configuration” main menu item, in the “Verification” tab. The veri f ication configuration can be mana ged by users with super-user account privileges.
Page 71 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved configured. (See “Editing Question Con f igurations” for details. ) Once you have configured a question you can add it to the “asked” list.
Page 72 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The default value for each question is “Use built-in verification database” .
Page 73 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved you do not need to enter a setting query.
Page 74 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved which have this checkbox checked. This allows you to use a mixture of pre-answ ered and user-configurable questions to v erify user identities.
Page 75 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Domain C onfiguratio n Overview The Account Reset Consol e can manage multiple domains simultaneously . Domain configuration is located under the “Con f iguration” menu item, in th e “ Domains” tab.
Page 76 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved View ing Domain Deta ils Clicking the [ details ] link next to a domain na me will allow you to view details on that domain. If there are multiple doma in controllers available, you can set ARC to use a preferred domain controller.
Page 77 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Applicati on Securit y Overview The Account Reset Consol e is a password management application and as such must be security-aware.
Page 78 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved button. The default timeout period is 20 minu tes, but if you have a need to make your environment more secure, you can set this as low as 1 m inute.
Page 79 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved To add a Super-User group, select the domain or local machine as appropriate, enter the name of the group in the edi t box, and click “Set Group as SuperUse rs”.
Page 80 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Licensing Overview The Account Reset Consol e requires a valid license from Lieberman So ftware Corporation to run.
Page 81 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The Account Reset Consol e is licensed according to the number of users the sy stem is being used to manage.
Page 82 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved The ARCWeb Site In dex Overview The Account Reset Consol e has an index page on the far right of the main menu which shows you every page in the appli cation.
Page 83 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Appendix A Troubleshooting Q: When you attempt to access the we b page, you receive the error: “Object Disabl ed”. A : This error is caused by ASP processing being disabled.
Page 84 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Q: After installation and w eb site configuration, logon screen is display ed s uccessfully. W hen a logon is attempted, the messa ge: “Error: Database Not Avai lable”.
Page 85 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Q: When attempting to load the w eb site, you receiv e the following error: “ The page cannot be displayed ” follow ed by a 403.2 error.
Page 86 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Click on the “ Configurat ion …” button located in the low er right area of the page. You will then see a dialog similar to the follo wing: Confirm that the entry in the “ Extension ” colu mn f or “ .
Page 87 of 94 - Administra tion Manual - Copyright 2007 - Lieberman Software Co rporation - All Rights Res erved Please note that the path w ill be unique for your installation. Q: When attempting to load the w eb site, you receiv e the following error: “ Directory Li sting Denied” or you see the contents of the Arc W ebww w directory.
An important point after buying a device Microsoft 4.5.X (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Microsoft 4.5.X yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Microsoft 4.5.X - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Microsoft 4.5.X you will learn all the available features of the product, as well as information on its operation. The information that you get Microsoft 4.5.X will certainly help you make a decision on the purchase.
If you already are a holder of Microsoft 4.5.X, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Microsoft 4.5.X.
However, one of the most important roles played by the user manual is to help in solving problems with Microsoft 4.5.X. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Microsoft 4.5.X along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center