BusinessObjects Enterprise Administrator's Guide

Mapping NT accounts

To simplify administration, BusinessObjects Enterprise supports user and group accounts that are created using Windows NT. However, before users can use their NT user name and password to log on to BusinessObjects Enterprise, their NT user account needs to be mapped to BusinessObjects Enterprise. When you map an NT account, you can choose to create a new BusinessObjects Enterprise account or link to an existing BusinessObjects Enterprise account.

You can map NT accounts to BusinessObjects Enterprise through Windows, by using the User Manager in Windows NT or Computer Management in Windows 2000, or through the CMC.

Note:    NT accounts refer to both Windows NT and 2000 accounts.

To map NT users and groups using Windows NT

1. From the Windows Administrative Tools program group, click User Manager.

Note:    Ensure that you have selected the domain that contains the BusinessObjects NT Users group.

2. Select the BusinessObjects NT Users group.

Note:    The BusinessObjects NT Users group is created automatically in Windows NT when you install BusinessObjects Enterprise on Windows NT.

3. From the User menu, click Properties.
4. Click Add.
5. Select the group(s) and/or user(s); then click Add.
6. Click OK to add the group(s) and/or user(s).
7. Click OK to complete the process.

Tip:    Users will now be able to log on to InfoView using their NT account if they use .the following format:

\\NTDomainName\NTusername or

NTMachineName\LocalUserName

Users do not have to specify the NT Domain Name if it is specified in the "Default NT Domain" field on the Windows NT tab.

To map NT users and groups using Windows 2000

1. From the Windows Administrative Tools program group, click Computer Management.
2. Under System Tools, select Local Users and Groups.
3. Click the Groups folder.
4. Select the BusinessObjects NT Users and from the Action menu, select Properties.
5. Click Add.
6. Select the group(s) and/or user(s); then click Add.
7. Click OK to add the group(s) and/or user(s).
8. Click OK or Apply (and then Close) to complete the process.

Tip:    Users will now be able to log on to InfoView using their NT account if they use the following format:

\\NTDomainName\NTusername or

NTMachineName\LocalUserName

Users do not have to specify the NT Domain Name if it is specified in the "Default NT Domain" field on the Windows NT tab.

To map NT users and groups using BusinessObjects Enterprise

Before starting this procedure, ensure you have the NT domain and group information.

1. Go to the Authentication management area of the CMC.
2. Click the Windows NT tab.

 

3. Ensure that the NT Authentication is enabled check box is selected.
4. If you will be using single sign-on, select the Single Sign On is enabled check box.

Note:    If you select this option, you must also configure the IIS for single sign-on. For details, see Setting up NT single sign-on. Failing to configure IIS could compromise your system security if the account that IIS runs under belongs to a mapped group, because users who use one of the web applications would automatically have the same access privileges as the IIS machine account.

5. To change the Default NT domain, click the domain name. Complete the Default NT Domain field.

Note:    By typing the default NT Domain Name, users do not have to specify the NT Domain Name when they log on to BusinessObjects Enterprise via NT authentication. Also, you don't have to specify the NT domain name when you map groups.

6. In the Mapped NT Member Groups area, enter the NT domain\group in the Add NT Group (NT Domain\Group) field.

Note:    If you want to map a local NT group, you must type \\NTmachinename\groupname.

7. Click Add.

The group is added to the list.

8. New Alias Options allow you to specify how NT aliases are mapped to Enterprise accounts. Select either:
• Assign each added NT alias to an account with the same name

  Use this option when you know users have an existing Enterprise account with the same name; that is, NT aliases will be assigned to existing users (auto alias creation is turned on). Users who do not have an existing Enterprise account, or who do not have the same name in their Enterprise and NT account, are added as new NT users.

  or

• Create a new account for every added NT alias

  Use this option when you want the system to create a new account for each user. The system ensures that the users are created with unique names. For example, if BusinessObjects Enterprise user bsmith already exists and an NT user with the same is added, the new user will be bsmith01.

9. Update Options allow you to specify if NT aliases are automatically created for all new users. Select either:
• New aliases will be added and new users will be created

  Use this option to automatically create a new alias for every NT user mapped to BusinessObjects Enterprise. New NT accounts are added for users without BusinessObjects Enterprise accounts, or for all users if you selected the "Create a new account for every added NT alias" option.

  or

• No new aliases will be added and new users will not be created

  Use this option when the NT directory you are mapping contains many users, but only a few of them will use BusinessObjects Enterprise. BusinessObjects Enterprise does not automatically create aliases and Enterprise accounts for all users. Instead, it creates aliases (and accounts, if required) only for users who log on to BusinessObjects Enterprise.

10. New User Options allow you to specify properties of the new Enterprise accounts that are created to map to NT accounts. Select either:
• New users are created as named users

  New user accounts are configured to use named user licenses. Named user licenses are associated with specific users and allow people to access the system based on their user name and password. This provides named users with access to the system regardless of how many other people are connected. You must have a named user license available for each user account created using this option.

• New users are created as concurrent users

  New user accounts are configured to use concurrent user licenses. Concurrent licenses specify the number of people who can connect to BusinessObjects Enterprise at the same time. This type of licensing is very flexible because a small concurrent license can support a large user base. For example, depending on how often and how long users access BusinessObjects Enterprise, a 100 user concurrent license could support 250, 500, or 700 users.

11. Click Update.

A message appears stating that it will take several seconds to update the member groups.

12. Click OK.