eControl Login Screen

eControl Login Screen

eControl Login Screen: Your non-technical staff – junior administrators, help desk operators, teachers, department managers – can login to Omni eControl from any browser on any computer to carry out user management tasks. If you have a distributed environment and want to implement delegated account management, users can quickly and easily login and carry out the tasks you have assigned them. Users will only see the users, groups, systems, and distribution lists that you want them to manage.

If you have enabled eControl Self-Service, users can click the “Forgot Your Password” link, answer the challenge phrase(s), and update their password without having to call your help desk.

GroupWise and eDirectory Tasks

GroupWise and eDirectory Tasks

GroupWise and eDirectory Tasks: In this screen shot, the help desk operator is able to carry out the full set of GroupWise and eDirectory tasks that are available to be managed in eControl. Administrators can choose to delegate a single tasks, a subset of tasks or a complete set of tasks as required. To see the tasks you can carry out, right-click an account and you will see the task drop-down menu. Novell and Microsoft accounts and groups can be managed from a single browser.

Change eDirectory Password

Change eDirectory Password

Change eDirectory Password: After clicking “Reset Password” from the drop-down menu, help desk operators can change both eDirectory and GroupWise passwords. Administrators can configure eControl to require that both passwords be the same – or different. So, by changing one password, both will update automatically.

Manage GroupWise Distribution Lists

Manage GroupWise Distribution Lists

Manage GroupWise Distribution Lists: Quickly and easily add or remove users from one or more GroupWise distribution lists. Shift-click or control-click to select multiple distribution lists. eControl uses AJAX and other Web 2.0 technologies to enhance ease of use for your non-technical staff.

Manage eDirectory Groups

Manage eDirectory Groups

Manage eDirectory Groups: eControl 3 introduces delegated eDirectory group management and creation. Help desk operators have the option to add or remove multiple users to or from an eDirectory group.

Release Intruder Lockout

Release Intruder Lockout

Release Intruder Lockout: Allow department managers, teachers, lab assistants, librarians or any other non-technical user to release intruder lockout for accounts they supervise – reduce your administrative burden and unnecessary calls to the help desk.

Manage GroupWise Internet Addressing

Manage GroupWise Internet Addressing

Manage GroupWise Internet Addressing: Select your preferred GroupWise address format from the drop-down to update preferred GroupWise Internet address format.

Manage Password Restrictions

Manage Password Restrictions

Manage Password Restrictions: Does this screen look familiar to you? We have re-created the “Password Restrictions” section of Novell ConsoleOne in eControl. How powerful is that?

Manage Extended eDirectory Attributes

Manage Extended eDirectory Attributes

Manage standard and Extended eDirectory Attribute Values: Support staff can use eControl to change eDirectory values for users. Need to manage extended schema attributes like student IDs or SAP IDs? eControl makes this quick and easy compared to managing these values in ConsoleOne or iManager.

Active Directory and Exchange Tasks

Active Directory and Exchange Tasks

Active Directory and Exchange Management Tasks: eControl can be used to manage Microsoft-only, Novell-only or mixed and multiple Active Directory, Exchange, eDirectory and GroupWise environments from a single browser. Search for users, security groups and distribution groups. Then right-click the account or group to view the management tasks you can carry out. Remember, as the eControl administrator, you have full control over the tasks you wish to assign to members of Active Directory groups and the search contexts in which they can carry out those tasks.

Reset Active Directory Passwords

Reset Active Directory Passwords

Reset Active Directory Passwords: Empower your front-line staff to change users’ Active Directory passwords. Enforce strong password requirements with eControl.

Disable Active Directory Accounts

Disable Active Directory Accounts

Disable Active Directory Accounts: Quickly and easily enable and disable Active Directory accounts. When provisioning Active Directory and Exchange accounts, administrators have the option to set the account as disabled until the department manager enables the account. This can be useful for temporary or contract staff.

Manage Active Directory Group Membership

Manage Active Directory Group Membership

Manage Active Directory Group Membership: Add or remove multiple users from Active Directory groups by shift- or control-clicking the desired accounts. Administrators have full control over the Active Directory groups that are available to be managed in eControl.

Manage Active Directory Values

Manage Active Directory Values

Manage Active Directory Values and Extended Schema Attributes: Clerical or non-technical support staff can use eControl to manage Active Directory values for users. Need to manage extended schema attributes like student IDs or SAP IDs? eControl makes this quick and easy compared to managing these values in Microsoft Management Console or Task Pads.

eControl Create Profiles

eControl Create Profiles

eControl Create Profiles: Administrators create eDirectory or Active Directory templates and make them available in eControl so support staff can provision accounts quickly and easily by filling in a user’s first and last name and a temporary password. Behind the scenes, eControl creates the email account, directory account, home directory, and all of the associated group memberships, volume restrictions, access to network drives and so on.

eControl Create Form

eControl Create Form

eControl Create Form: Support staff simply enter the user’s first name, last name and a temporary password. A prompt enforces strong passwords by displaying a green bar after the appropriate number of characters have been entered.

eControl Create Confirmation Screen

eControl Create Confirmation Screen

eControl Create Confirmation Screen: Notice that the username and display name were automatically created based on naming policies. In this case, we see that the organizaton has a policy set that creates accounts based on the first two characters of the user’s first name and full last name. Administrators have full control over the naming convention that is enforced.

Create Novell eDirectory and GroupWise Accounts

Create Novell eDirectory and GroupWise Accounts

Create Novell eDirectory and GroupWise accounts: This screen confirms that the account was provisioned successfully. In the “Summary” box, you can see that the eDirectory account was created along with the user’s home directory, NDS file system resource and home directory information.

Create Active Directory and Exchange Accounts

Create Active Directory and Exchange Accounts

Create Active Directory and Exchange accounts: This screen confirms that the Active Directory and Exchange accounts were provisioned successfully. If an error occurs, eControl will provide suggestions on how to fix the issue or ask the user to contact the eControl Administrator.

eControl Self-Service Login

eControl Self-Service Login

Self-service Login: Administrators can enable end-users to update certain demographic information in eDirectory or Active Directory (e.g., cell phone numbers, licence plate numbers or other contact details). If users forget their password, they simply need to click the “Forgot Your Password” link next to the login button and answer the challenge response phrases they have answered in the Self-service module.

Update Personal Demographic Information

Update Personal Demographic Information

Personal Demographic Information: In this screen shot, the end-user has the ability to update her preferred name, department, title, and contact details. The links at the top of the page allow users to update the responses to change their password and/or update the responses to their password challenge phrases

Password Self-Service

Password Self-Service

Password Self-service: Users enter their new password. If strong password requirements need to met, the appropriate prompts will appear and a green bar will show that the password is compliant with the strong password policy.

Update Challenge Responses

Update Challenge Responses

Update Challenge Responses: Administrators configure the challenge questions that users need to reply to in order to update their passwords. Administrators have full control over the questions that appear and how many need to be answered correctly for passwords to be changed.

Define Task Collections

Define Task Collections

Define Task Collections: The first step to deploying eControl is to make sure that all the System Requirements have been met. Next, you will set up the connections to your destination systems. Then you are ready to login to the eControl’s web-based administration interface to configure each module. In this first step, you configure the task collections that are available to be assigned to groups who have been tasked with carrying out delegated management tasks.

Active Directory Task Collections

Active Directory Task Collections

Active Directory Task Collections: Here, we see an “All Tasks” task collection has been created. If we click on each of the management options (the ones above in the Omni Manage drop-down menu screen shots), we’ll see that all of the tasks have been enabled.

Assign Task Collections to Groups

Assign Task Collections to Groups

Assign Task Collections to Groups: In eControl (or the standard Novell and Microsoft administration tools), you add the group(s) to which you want to assign a task collection. The tasks in that collection can then be carried out by any member of the Active Direcotry or eDirectory group. You assign a “search authority” to the task to restrict against which users the tasks can be applied.

For example, we see the name of the Tree (omni-tree), the location of the new group (associated LDAP information), we select the task collection from the drop-down. By clicking the “Search Context” link, you identify which container or group of users can be managed.

Manage Identification Forms

Manage Identification Forms

Manage Identification Forms: This is where administrators configure the Active Directory and eDirectory demographic information pages. You choose which fields will be visible, which can be edited, which are required and whether multiple rows are required (e.g., address fields, multiple surnames in Latin American countries). You can also provide a certain measure of localization by updating the default English field values.

Manage eControl Create Fields

Manage eControl Create Fields

Manage eControl Create Field Collections: By clicking on the “Create” tab, administrators can click the “Manage Create Forms” button to configure the fields in the forms used to provision accounts. Add the form to the drop-down menu, right-click the tree nodes to view the options and configure the fields.

Preview eControl Create Form

Preview eControl Create Form

Preview eControl Create Form: From the administration back-end, administrators can preview Create Forms by clicking the “Preview Form” button.

eControl Create Profile Options

eControl Create Profile Options

Create Profile Options: In the “Profiles” section, administrators define where the user create profile is located, where users accounts get created, which help desk operators are able to provision accounts, and which templates are available to them.

eControl Self-Service Administration

eControl Self-Service Administration

Manage Self-service Module: By clicking the “Self-service” tab, administrators can enable password self-service and define which users will have access to this (e.g., limiting password self-service only to staff in K-12 environments instead of students). Administrators also define which challenge-response questions will be used and the number that need to be answered correctly for end-users to change their password.