How to set "Console Operator" privilege on Netware 3.2

[Guido Arocha]

All right I give up,

Using SYSCON I can go to user information on a particular user
and I can choose "Other Information". This will display if the user
is consider a "File Server Console Operator". This is nice. But it is
a display only field. How/Where do I get to change this field for
a particular user?

Thanks in advance for your reponse(s),
Guido Arocha.

[Felton Green]

Hi,

File Server Console Operator

A user or a member of a group to whom SUPERVISOR delegates certain rights to
manage the file server.

A Console Operator has rights to use the FCONSOLE utility. This utility
allows the Console Operator to do the following:

Broadcast messages to users

Change file servers

Access connection information

View NetWare version information

Change the system date and time

Enable or disable login for additional users

Enable or disable TTS

Assign or Delete a Group or User as a Console Operator

You can specify which groups or users are console operators. Console
operators can access FCONSOLE (file server console) from workstations they
are logged in to.

Procedure

1.Enter SYSCON and choose "Supervisor Options" from the "Available Topics"
menu.

2.Choose "File Server Console Operators" from the "Supervisor Options" menu
to display groups or users that are console operators.

3.Add or delete console operators:

Add console operators. Press <Insert>. In the "Other Users and Groups"
list, choose the user or group you want to be a console operator. Use the
Mark key (<F5> or <F6>) to choose more than one user or group.

Delete console operators. Highlight the user or group you want to delete
from the "File Server Console Operator" list. To delete more than one user
or group, highlight them with the Mark key (<F5> or <F6>) and press
<Enter>. Choose "Yes" in the confirmation window

--
Felton Green (SysOp)
Novell Support Connection

Brainshare is coming!
The worlds best convention on networking
Brainshare is coming!
March 18 - 23, 2001

http://www.novellbrainshare.com/

[Guido Arocha]

Thanks very much for your response.

I just have one more question about Console Operators.

Can Console Operators reset user passwords using syscon (or
some other utility)?

Thanks again,
Guido Arocha.
--------------

[Felton Green]

Hi,

To answer your question: No.

User Account Manager

A user or group that has rights to manage some users and groups.

Existing users can be assigned to a Workgroup Manager or to any other user
or group for account management. Workgroup Managers automatically become
User Account Managers for users they create.

Even though account management is delegated, SUPERVISOR still has all rights
to manage user accounts.

User Account Manager Tasks

User Account Managers can do the following:

Delete managed users and groups.

Assign a managed user to a managed group.

Assign a managed user as User Account Manager.

Modify all options in SYSCON's "User Information" submenu not requiring file
rights, including the following:

Account Balance

Account Restrictions

Change Password

Full Name

Groups Belonged To

Login Script

Managed Users and Groups

Managers

Security Equivalences

Station Restrictions

With assigned file rights, make or modify

Trustee directory assignments;

Trustee file assignments;

Volume restrictions;

Disk space restrictions.

User Account Managers cannot

Create users or groups;
Assign users to a group the manager does not manage;

Modify the login restrictions of their own accounts (unless they are also
assigned management of their own accounts).

Why Have User Account Managers?

If you assign experienced users as User Account Managers, especially in a
large system, they can handle routine tasks such as assigning users to new
groups or changing drive mappings (in individual login scripts), account
restrictions, account balances, etc.

A user can be managed by more than one user account manager, so you can have
a backup if the User Account Manager is not available.

Workgroup Manager

An assistant network supervisor with rights to create and delete bindery
objects (such as users or groups) and to manage user accounts.

A Workgroup Manager has supervisory privileges over a part of the bindery. W
hen several groups share a file server, you can use Workgroup Managers over
groups that want autonomous control over their own users and data.
Workgroup Managers supplement, but do not replace, the network SUPERVISOR.
SUPERVISOR retains absolute control over the network.

Workgroup Managers do not automatically acquire rights to the directory
structure and file system. These rights must be granted by SUPERVISOR.

We recommend that you assign Workgroup Managers the Supervisory right in a
specific volume or directory so that they can grant directory and file
rights to users in their workgroups.

If you assign file rights to a directory (rather than to a volume), we also
recommend that you make a disk space assignment to the directory.

Workgroup Manager Tasks

Workgroup Managers can

Create users and manage their accounts.

Delete users they have created.

Create groups and add users they manage.

With file rights, make or modify

Trustee directory assignments;

Trustee file assignments;

Volume restrictions;

Disk space restrictions.

Workgroup Managers cannot
Create a user and make that user security equivalent to SUPERVISOR;

Create a Workgroup Manager;

Manage users or groups they have not created unless they are also designated
as the User Account Manager;

Assign any rights they have not been assigned by SUPERVISOR;

Modify the login restrictions of their own accounts (unless they are also
assigned management of their own accounts);

Create or delete print queues.