Symantec 14541094 Administration Guide - Page 94

Using Microsoft Windows-based authentication types

Page 94 highlights

94 Managing security in Symantec pcAnywhere Controlling access to pcAnywhere hosts This Next Tokencode is generated by the SecurID authenticator. The remote user must wait for this tokencode before continuing. Note: To use RSA SecurID authentication, the host and remote computers must be running Symantec pcAnywhere 11.0.x or later. Using Microsoft Windows-based authentication types Table 6-1 includes information about the authentication types available for Microsoft Windows-based platforms. Table 6-1 Microsoft Windows-based authentication types Microsoft Windows-based authentication types Explanation Implementation in pcAnywhere ADS (Active Directory Server) (For Windows 2000 only) Validates a user or group by checking a list stored in an Active Directory Service. Users can browse an ADS tree for user or group names. Microsoft LDAP Validates a user or group Users must log on to the by checking a user list LDAP server, and then stored in a Lightweight they can browse for user Directory Access Protocol names. (LDAP) 3.0-compliant directory service. NT (For Windows NT/2000 only) Validates a user or group Users on Windows NT can by checking a workstation browse a domain list for or user domain list. user or group names. Windows Validates a user or group by checking a Microsoft Networking Shared Directory. Users on Windows 9x or Windows Me can browse a shared directory for user or group names. Setting up Windows NT authentication for global users Symantec pcAnywhere lets you configure a server using NT authentication to support callers from the local administrator user group and any global groups that are included in the local group. Using this feature, you can set up a caller account on a server for all administrators in your company by adding a domain account to the local administrator group.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109

This Next Tokencode is generated by the SecurID authenticator. The remote user
must wait for this tokencode before continuing.
Note:
To use RSA SecurID authentication, the host and remote computers must
be running Symantec pcAnywhere 11.0.x or later.
Using Microsoft Windows-based authentication types
Table 6-1
includes information about the authentication types available for
Microsoft Windows-based platforms.
Table 6-1
Microsoft Windows-based authentication types
Implementation in
pcAnywhere
Explanation
Microsoft Windows-based
authentication types
Users can browse an ADS
tree for user or group
names.
Validates a user or group
by checking a list stored
in an Active Directory
Service.
ADS (Active Directory Server) (For
Windows 2000 only)
Users must log on to the
LDAP server, and then
they can browse for user
names.
Validates a user or group
by checking a user list
stored in a Lightweight
Directory Access Protocol
(LDAP) 3.0-compliant
directory service.
Microsoft LDAP
Users on Windows NT can
browse a domain list for
user or group names.
Validates a user or group
by checking a workstation
or user domain list.
NT (For Windows NT/2000 only)
Users on Windows 9x or
Windows Me can browse
a shared directory for
user or group names.
Validates a user or group
by checking a Microsoft
Networking Shared
Directory.
Windows
Setting up Windows NT authentication for global users
Symantec pcAnywhere lets you configure a server using NT authentication to
support callers from the local administrator user group and any global groups
that are included in the local group.
Using this feature, you can set up a caller account on a server for all administrators
in your company by adding a domain account to the local administrator group.
Managing security in Symantec pcAnywhere
Controlling access to pcAnywhere hosts
94