The business case is this: Only people who’s active directory accounts are in “users” or are in “no mail users” should be able to reset their passwords using Courion. All other accounts are (probably) service accounts or privileged accounts. Courion already has documentation to restrict access to a workflow based on a single group membership, [...]
Author Archive
Courion Tip – Restricting Access to Workflows
Courion Tip – User Home Drive Permissions
The situation – user home drives get created with Courion pretty much ‘straight out of the box’. Permissions can be set, drive letter set. However, the home drive does not inherit permissions from it’s parent folder. How to resolve this? Start by reading “Configuring Workflows.pdf” that came with your version. For version 8.00, the pages [...]
Courion Tip – Target ID names
Until you progress beyond reading my posts, I couldn’t suggest strongly enough that you keep the targetid consistent in name structure and in every place it’s used. To clarify, you need to enter the targetid 3 places in the workflow , 3 places in the AMM connector, and 2 places in the PMM gateway connector. [...]
Courion Tip – SSIS Package changes
First off – MAKE A COPY OF THE SSIS PACKAGES before you do anything. If possible, implement a versioning system. I like to just copy the folder, and rename the copy to yearmonthdate_package name. For instance, 20120301_Courion_SAP_Import I can’t give you too many specifics, I will probably re-edit this post several times, but here are [...]
Courion Tip – Getting Started: Know your data
Know your data. Let’s start with the basics. Courion (to me) isn’t a solution, it’s a solution framework. So, it (probably) doesn’t have canned answers for what you are trying to do, you have to come up with them yourself. I’ve had requests to base things on the user’s department number – only to find [...]
Courion Tip – Getting Started: Backup
I have in mind to do a series of these, but let’s start with the basics. The first thing I think you should do as a new courion admin would be to make sure you have backups. Backups of what? Well: cfgfile.db & log files The courion support site has a batch file that you [...]
Removing Cached Credentials
http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/AdminTips/Security/RemoveSavedPasswords.html 1. Click Start and select Run 2. In theĀ Open field type “rundll32.exe keymgr.dll, KRShowKeyMgr”
Track It
Looks like the user information is stored in a table called STAF
Courion Tip – Restricting the number of systems a user can request
The scenario is this… We have several similar systems (same target type) with different approvers. So, a user could fill out a request for access to system1, system2, and system3. BUT, in 7.80, there is no granularity in the request. If the approver for system3 logs in, and approves the request, then the user by [...]
Courion Tip – ODBC
The confgiuration managers are 32-bit applications. The 32-bit ODBC Data Soruce Administrator must be used to configure DSNs for 32-bit applications to use. To run the 32-bit version of the ODBC Administrator, in the Windows Run dialog box, type: %windir%\syswow64\odbcad32.exe System data sources created in the 64-bit ODBC administrator are only visible to 64-bit applications. [...]