Active Directory Security Groups: Difference between revisions

Revision as of 10:39, 6 November 2024

Create Template User

1. Open the User Editor

2. Click the Add User button.

3. Configure the following properties for the user:

- User ID: The User ID must be set to #AD_TEMPLATE_USER#.

- Location Name:The default location that you want to be applied when a new user is added to TraCS.

- Encryption Key: The default encryption key to apply to new TraCS users. Defaults to UniversalKey.

Update Database Connection Settings

TraCS staff will have to do this for you on your Web server.

1. Add a connection string called 'Active Directory' under Other

2. Enter LDAP string like 'ldap://domainservername'

3. Set the LoginGroup to 'TraCSLogin'

4. Access Levels set to 'True'

5. Associated Users set to 'True'

6. User Groups set to 'False'

7. You may or may not need to enter log in credentials.

8. Apply settings in the editor and restart the application pool once complete.

Update TraCS Settings.ini

File path/name: C:\ProgramData\TraCS\Settings\Settings.ini

Mobile Units must have LoginType=ActiveDirectoryPrompt

Office Units (servers) must have LoginType=ActiveDirectory

If changing a web server's log in type you must restart the application pool

Active Directory Groups

Create AD Groups

Create the following groups in Active Directory (AD)

TraCS Records
TraCS Reporter
TraCS RecordsDataEntry
TraCS Supervisor
TraCS System Admin
TraCSAccessLevelRecords
TraCSAccessLevelReporter
TraCSAccessLevelRecordsDataEntry
TraCSAccessLevelSupervisor
TraCSAccessLevelSystemAdmin
TraCSAUAll Users_Records
TraCSAUAll Users_Reporter
TraCSAUAll Users_RecordsDataEntry
TraCSAUAll Users_Supervisor
TraCSAUAll Users_SystemAdmin
TraCSGroupAll Users
TraCSLogin

Add Existing Users to AD Group

Existing AD Users (or existing AD groups) will be a member of one of these AD Security Groups:

TraCS Records
TraCS Reporter
TraCS RecordsDataEntry
TraCS Supervisor
TraCS System Admin

AD Group Membership

Each of these TraCS AD Security groups will be a member of

TraCS Records

Member of:

TraCSAccessLevelRecords
TraCSGroupAll Users
TraCSLogin
TraCSAUAll Users_Records

TraCS Reporter

Member of:

TraCSAccessLevelReporter
TraCSGroupAll Users
TraCSLogin
TraCSAUAll Users_Records

TraCS RecordsDataEntry

Member of:

TraCSAccessLevelRecordsDataEntry
TraCSAccessLevelRecordsDataEntry
TraCSGroupAll Users
TraCSLogin
TraCSAUAll Users_RecordsDataEntry

TraCS Supervisors

Member of:

TraCSAccessLevelRecords
TraCSAccessLevelReporter
TraCSAccessLevelCitationReporter
TraCSAccessLevelWarningReporter
TraCSAccessLevelSupervisor
TraCSGroupAll Users
TraCSLogin
TraCSAUAll Users_Records
TraCSAUAll Users_Reporter
TraCSAUAll Users_Supervisor

TraCS SystemAdmin

Member of:

TraCSAccessLevelRecords
TraCSAccessLevelReporter
TraCSAccessLevelSupervisor
TraCSAccessLevelSystemAdmin
TraCSGroupAll Users
TraCSLogin
TraCSAUAll Users_Records
TraCSAUAll Users_Reporter
TraCSAUAll Users_Supervisor
TraCSAUAll Users_SystemAdmin

@@ Line 12: / Line 12: @@
 - Encryption Key: The default encryption key to apply to new TraCS users. Defaults to UniversalKey.
 ===Update Database Connection Settings===
@@ Line 33: / Line 32: @@
 . Apply settings in the editor and restart the application pool once complete.
 ===Update TraCS Settings.ini===
@@ Line 49: / Line 47: @@
 [[Image: ADOfficeSettings.jpg]]
 ===Active Directory Groups===
-====Sample User (Records)====
-[[File:ADSampleUser.png]]
@@ Line 68: / Line 62: @@
 '''Existing AD Users (or existing AD groups) will be a member of one of these AD Security Groups:'''
-TraCS Records
+TraCS Records<br>TraCS Reporter<br>TraCS RecordsDataEntry<br>TraCS Supervisor<br>TraCS System Admin
-TraCS Reporter
-TraCS RecordsDataEntry
-TraCS Supervisor
-TraCS System Admin
 ====AD Group Membership====
@@ Line 87: / Line 72: @@
 ''Member of:''
-TraCSAccessLevelRecords
+TraCSAccessLevelRecords<br>TraCSGroupAll Users<br>TraCSLogin<br>TraCSAUAll Users_Records<br>
-TraCSGroupAll Users
-TraCSLogin
-TraCSAUAll Users_Records
 '''TraCS Reporter'''
@@ Line 100: / Line 78: @@
 ''Member of:''
-TraCSAccessLevelReporter
+TraCSAccessLevelReporter<br>TraCSGroupAll Users<br>TraCSLogin<br>TraCSAUAll Users_Records
-TraCSGroupAll Users
-TraCSLogin
+'''TraCS RecordsDataEntry'''
-TraCSAUAll Users_Records
-'''TraCS RecordsDataEntry
-'''
 ''Member of:''
-TraCSAccessLevelRecordsDataEntry
+TraCSAccessLevelRecordsDataEntry<br>TraCSAccessLevelRecordsDataEntry<br>TraCSGroupAll Users<br>TraCSLogin<br>TraCSAUAll Users_RecordsDataEntry
-TraCSAccessLevelRecordsDataEntry
-TraCSGroupAll Users
-TraCSLogin
-TraCSAUAll Users_RecordsDataEntry
@@ Line 129: / Line 92: @@
 ''Member of:''
-TraCSAccessLevelRecords
+TraCSAccessLevelRecords<br>TraCSAccessLevelReporter<br>TraCSAccessLevelCitationReporter<br>TraCSAccessLevelWarningReporter<br>TraCSAccessLevelSupervisor<br>TraCSGroupAll Users<br>TraCSLogin<br>TraCSAUAll Users_Records<br>TraCSAUAll Users_Reporter<br>TraCSAUAll Users_Supervisor
-TraCSAccessLevelReporter
-TraCSAccessLevelCitationReporter
-TraCSAccessLevelWarningReporter
-TraCSAccessLevelSupervisor
-TraCSGroupAll Users
-TraCSLogin
-TraCSAUAll Users_Records
-TraCSAUAll Users_Reporter
-TraCSAUAll Users_Supervisor
 '''TraCS SystemAdmin'''
@@ Line 154: / Line 98: @@
 ''Member of:''
-TraCSAccessLevelRecords
+TraCSAccessLevelRecords<br>TraCSAccessLevelReporter<br>TraCSAccessLevelSupervisor<br>TraCSAccessLevelSystemAdmin<br>TraCSGroupAll Users<br>TraCSLogin<br>TraCSAUAll Users_Records<br>TraCSAUAll Users_Reporter<br>TraCSAUAll Users_Supervisor<br>TraCSAUAll Users_SystemAdmin
-TraCSAccessLevelReporter
+====Sample User (Records)====
-TraCSAccessLevelSupervisor
+[[File:ADSampleUser.png]]
-TraCSAccessLevelSystemAdmin
-TraCSGroupAll Users
-TraCSLogin
-TraCSAUAll Users_Records
-TraCSAUAll Users_Reporter
-TraCSAUAll Users_Supervisor
-TraCSAUAll Users_SystemAdmin