Using domain groups to manage DLO permissions

An administrator on the media server can create and configure DLO administrator accounts for users using the DLO Administrator Account Management dialog. One method of managing DLO administrative access is to use domain groups to specify who has rights to administer DLO. Two groups can be specified. The first group is granted full restore privileges. The second group has limited restore privileges.

See About administrator accounts in DLO.

Alternatively, DLO can be configured to use a list of accounts for permissions management.

See Using a list of individual accounts to manage DLO permissions.

To configure DLO to use domain groups for permissions management

  1. On the Network menu, click Administrator Accounts.

  2. Click Permissions.

  3. Check the Use domain groups to manage access to network user data folders check box.

    When this check box is checked, domain groups are listed on the Administrator Account Management dialog box. When this check box is unchecked, individual user accounts are listed. If you change from one type of account management to another, the previous settings are retained for future use. For example, if you have a list of individual DLO administrators and then change your configuration to use domain groups, the list of individual accounts is saved. The list of individual accounts is used again if you uncheck the check box.

  4. Select the appropriate options as follows:

    For DLO administrators with full restore privileges, use the domain group

    To grant full restore privileges to DLO administrators in a specified domain group, enter or browse to a fully qualified domain group.

    Example: Enterprise\DLOFullAdmins

    Full restore privileges include the ability to restore a desktop user's files to an alternate location.

    For DLO administrators with limited restore privileges, use the domain group

    To grant limited restore privileges to DLO administrators in a specified domain group, enter or browse to a fully qualified domain group.

    Example: Enterprise\DLOLimitedAdmins

    Limited restore privileges do not include the ability to restore a desktop user's files to an alternate location.

  5. Click OK twice.