Automatically generate users
- Log on as an administrator user, then select Security Settings (SES), and the User Creation Settings tab. This allows you to automatically create SunSystems operator codes, and to map groups, based on the Windows users and groups in Active Directory.
- After you have completed this form, click OK to create the users and group mappings.
-
Specify this information:
- Automatically Generate SunSystems Operator Codes
- Check this check box to create SunSystems users and operator codes based on Windows users in Active Directory.
The following options are activated only if you check the Automatically Generate SunSystems Operator Codes check box:
- Convention for how Full Name is expressed
- Select the appropriate option for SunSystems to interpret whether the
user names received from Active Directory have the given name first,
or the family name first. This setting is used only to identify the
order of names for the option below, Operator Code generation
algorithm, and does not affect the Full Name field generated for
the SunSystems user.
Note: This option allows you to set the rule for interpreting the majority of user names that are likely to be encountered by the operator code generation algorithm. If a full name in Active Directory is expressed differently from the rule you set, it is still given an operator code; however, the generated code may not have all the initials or the order of initials you expected.
- Operator Code generation algorithm
- Select the option to determine the order of
initials in the generated three-digit SunSystems operator codes. If an operator code
already exists, the algorithm automatically defaults to the first
and last initial followed by 0, or the next available number up to
9. If these ten operator codes already exist, the algorithm
automatically defaults to the first initial followed by 00, up to
99.
Note: All words in the full name that are separated by spaces are treated as separate names when identifying the initials to use for the operator code, except for those that you specify on the Ignored connector words list.
- Ignored connector words
- Enter a list of words that may be parts of names in Active Directory, that should be ignored when deducing the initials to use in the operator codes. For example, if full names in Active Directory contain de, la, y, and so on., not adjoined or hyphenated, add these words to the list of Ignored connector words so that the operator codes do not include initials for these words. Enter each word on a new line in the list.
Use the User Creation Defaults to set up default user settings based on Active Directory properties.
- Active Directory Properties
- This displays the list of properties available
from Active Directory. For each of the SunSystems user attributes displayed, you can link
an appropriate Active Directory property. To do this, select the
Active Directory property and click the arrow button corresponding
to the relevant User property.
To help you identify which properties you wish to select, you can use the search box to see example values for a user ID.
- Use the Group Mappings to map Windows Groups to SunSystems Users Groups. These group mappings are used when you switch on Automatic Enrolment in the Security Policy
- Select the relevant Windows group, and the corresponding SunSystems group, then click Map. If there are many Windows groups, you can use the Filter field to specify a text search for any string of characters in the relevant group. Groups that you have mapped are displayed in the Mapped Groups pane.
- To delete a mapping, select it in the Mapped Groups pane then click Delete Mapping.
- Save your changes.