Mapping NT accounts

To simplify administration, Crystal Enterprise supports user and group accounts that are created using Windows NT/2000. However, before users can use their NT user name and password to log on to Crystal Enterprise, their NT user account needs to be mapped to Crystal Enterprise. When you map an NT account, you can choose to create a new Crystal Enterprise account or link to an existing Crystal Enterprise account.

There are two ways to map NT accounts to Crystal Enterprise: you can use either the User Manager in Windows NT or Computer Management in Windows 2000, or you can use the Crystal Management Console in Crystal Enterprise.

Note:    NT accounts refer to both Windows NT and 2000 accounts.

To map NT users and groups using Windows NT

1. From the Windows Administrative Tools program group, click User Manager.

   Note:    Ensure that you have selected the domain that contains the Crystal NT Users group.

2. Select the Crystal NT Users group.

   Note:    The Crystal NT Users group is created automatically in Windows NT/2000 when you install Crystal Enterprise on Windows NT/2000.

3. From the User menu, click Properties.
4. Click Add.
5. Select the group(s) and/or user(s); then click Add.
6. Click OK to add the group(s) and/or user(s).
7. Click OK to complete the process.

   Tip:    Users will now be able to log on to ePortfolio using their NT account if they use the following format:

   \\NTDomainName\NTusername or

   \\NTMachineName\LocalUserName

   Users do not have to specify the NT Domain Name if it is specified in the "Default NT Domain" field on the Windows NT tab.

To map NT users and groups using Windows 2000

1. From the Windows Administrative Tools program group, click Computer Management.
2. Under System Tools, select Local Users and Groups.
3. Click the Groups folder.
4. Select the Crystal NT Users and from the Action menu, select Properties.
5. Click Add.
6. Select the group(s) and/or user(s); then click Add.
7. Click OK to add the group(s) and/or user(s).
8. Click OK or Apply (and then Close) to complete the process.

   Tip:    Users will now be able to log on to ePortfolio using their NT account if they use the following format:

   \\NTDomainName\NTusername or

   \\NTMachineName\LocalUserName

   Users do not have to specify the NT Domain Name if it is specified in the "Default NT Domain" field on the Windows NT tab.

To map NT users and groups using Crystal Enterprise

Before starting this procedure, ensure you have the NT domain and group information.

1. Go to the Authorization management area of the CMC.
2. Click the Windows NT tab.

   

3. Ensure that the NT Authentication is enabled check box is selected.
4. Complete the Default NT Domain field.

   Note:    By typing the default NT Domain Name, users do not have to specify the NT Domain Name when they log on to Crystal Enterprise via NT authentication.

5. Enter the NT domain\group in the Add NT Group (NT Domain\\Group) field.

   Note:    If you want to map a local NT group, you must type \\NTmachinename\groupname.

6. Click Add.

   The group is added to the list.

7. Select either:
   • Assign each added NT alias to an account with the same name

     Use this option when you know some users have an existing Enterprise account with the same name; that is, NT aliases will be assigned to existing users (auto alias creation is turned on). Users who do not have an existing Enterprise account, or who do not have the same name in their Enterprise and NT account, will be added as a user to the Enterprise account (with the user information that is stored in the NT account).

     or

   • Create a new account for every added NT alias

     Use this option when you want to create a new account for each user. If the user has already created an account through the sign-up feature in ePortfolio, the user will have separate NT and Enterprise accounts.

8. Click Update.

   A message appears stating that it will take several seconds to update the member groups.

9. Click OK.