Cisco Support Tools 1.0 User Guide How to Create Support Tools User Groups 39
How to Create Support Tools User Groups Installation Step 2
Support Tools recognizes two categories of users:
• Privileged users have full access to all Support Tools functionality, including tools
and commands that can be used to modify system settings, registries, etc.
• Regular users have limited access to information gathering functionality only.
Tools capable of system modification are not available to regular Support Tools
users.
To Create Support Tools User Groups
Support Tools assigns privilege based on regular Windows user groups. This can be
either a local group you define on the Support Tools Server machine or a domain
group you define using Active Directory).
During the Support Tools Server installation, you are prompted to enter the name of
one (and only one) Windows user group that will serve as the Support Tools
privileged group. Users in all other groups are treated as regular Support Tools
users.
Note: The privileged user group name is case-sensitive. It must match in case its
corresponding Windows user group name.
Note: All Support Tools users must be members of the Windows Everyone group;
anonymous users will not have access to Support Tools.
After installation, if necessary, you can modify the privileged group name by running
the Support Tools Server configuration.
Creating Local Accounts on the Support Tools Server
To ensure you have local access to the Support Tools Dashboard in situations when
network authentication is unavailable (for example, due to a downed network or
authentication server) it is a good idea to create one or more local user accounts on
the Support Tools Server.
To ensure full access to all utilities, these local accounts should be made members of
a local user group named identically to your Support Tools privileged user group.
When logging into the Dashboard using a local account, enter
<hostname>\<Windows_username> as your username; for example,
my_server\my_username.