Knowing Your Assigned Privileges and User Mode
As a thin client operator, you have a thin client account with certain privileges. Your thin client account is a set of application connection definitions and thin client configuration settings that are grouped under a privilege level and assigned to you by your administrator. Administrators create thin client accounts that possess specific connection capabilities, security, and various thin client functions. Assigned privileges and user modes allow you certain levels of access to thin client resources.
Note
User access to system-reset-to-factory defaults and the Network Setup dialog box can be denied by the user privilege (not the lock-down state). Therefore, if the thin client is locked down in High privilege, you will have access to all facilities, regardless of other items (unless there is an intervening privilege statement in an ini file). It is only when the thin client is locked down in the privilege None that you cannot recover control of the thin client. For more information about system lock-down, refer to "Understanding System Lock-down."
Assigned Privileges
The user profiles (Global and User) can assign three privilege levels of access to thin client resources: High-privileged, Low-privileged, and Non-privileged.
•High-privileged- With High privilege, all thin client resources are available with no restrictions. This is an administrative level of log-on. Connection definitions can be entered locally on the thin client, but they will typically be lost upon log-off/shutdown of the thin client. However, if configured by an administrator (enablelocal=yes), locally-defined connection definitions can be saved. If you are a user at this level, you can reset the device to factory defaults.
Note
High privilege is the default privilege (unless locked down in another privilege) and is in effect if a user profile is read that does not contain a privilege statement. If no wnos.ini file is read (same conditions), the connection definitions entered locally on the thin client are persistent and may even be visible if a wnos.ini file is found on a subsequent reboot (if an enablelocal=yes statement is read from one of the ini files).
•Low-privileged- This is the level assigned to a typical user of the thin client. The Network and Wireless selection on the System Setup submenu is disabled (the Network Setup dialog box and Wireless Setup dialog box cannot be opened). A Low-privileged user cannot reset the device to factory defaults.
•Non-privileged- This level of access is typical for kiosk or other restricted-use deployment. The System Setup selection on the desktop menu is disabled (the various dialog boxes available from the System Setup cannot be displayed). The Connect Manager is not available. The user cannot reset the device to factory defaults. Both the Dialup Manager and PPTP Manager dialog boxes are disabled.
Note
If you are accessing the enterprise intranet through Dial-up or PPTP VPN, the Network Setup dialog box is available during the dial-up process to establish the initial connection to the FTP server. If you then log on as a Low-privileged or Non-privileged user, however, access to the Network Setup dialog box is then disabled. The Dialup Manager and PPTP Manager dialog boxes are also disabled for a Non-privileged user.
