Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Advice on domain accounts.

Good afternoon/morning/evening or other.

So my current company has 3 domains (in this instance, domain 1, domain 2 and domain 3). I am thinking of using domain accounts/groups as it will make it tidier and easier to manage.

2 things:
1 - how would I set this up? For example, am I right in thinking that I would need to setup three domain groups to represent three domains and then setup groups to their respective domains.

eg -

Domain group.abdc.com - Node group = Admin group.abcd.com

Domain group123.com - Admin group 123.com

Domain group xyz.com - Admin group xyz.com

Or, can I pool everything together and under wishful thinking, hope that solarwinds figures everything out (unlikely) and realised that domain group A belongs with group A

I hope this makes sense, because if someone is sleepy, they would really struggle understanding this.

Find more posts tagged with

Accepted answers

All comments

jamesatloop1

Well to be honest, it really depends if there is synchronization of accounts across the domains. So if there is then you just need one group for the accounts. If there is just a trust relationship, then you will have to setup three groups on the three domain controllers and map the three groups in the accounts/groups.

shaun_9999

I have already resolved it. It's pretty simple really, I just needed two groups: One for admins and one for non admins. I really want a customer portal. Something that allows users to see their environment (nothing else) and maybe let them run some reports, possibly look at past details.

Something very simple that allows me to not do anything.

jamesatloop1

Very simple, just create a group for each environment containing the nodes for their environment. Do this under settings/ manage groups. Under the mapped ad groups in manage accounts, edit the mapped ad group. Under limitations, hit edit and select group of groups. Then select the newly created node groups you created from manage groups. Then they will only see items related to their environment.

shaun_9999

With the group that I have managed a created, can I add permissions to run reports?

shaun_9999

Also, how would I allow them only access to their reports? We have a few customers and all of their reports are together in a mess.

jamesatloop1

Yes, allow report management rights and the reports will be filtered by the group limitations you set. The second issue can be resolved by adding their reports to their favourites. There is also a table in customize views where you can display a list of reports. You can add the reports list to their dashboard as well.

shaun_9999

I was looking at custom views right now. I would need to build a new environment for them wouldn't I? Or can I granularly from the pre existing templates provides make one from their?

jamesatloop1

No, not at all the views are applicable to the mapped group so you only have to log in as one user in the group and customize the page. You can build a new view if you want to and set as default on their profile. Alternatively you can create a new view and link it to a button as well under customize menu bars.

shaun_9999

Ok, so I think I have it. I receive the following when I logon as the test user:

The giant wall Customers I don't like, I guess I would need to remove that? They can't access it, I just think it looks unprofessional.

jamesatloop1

Yes, remove anything they can access and create a new map for the items they can access. Give the test user admin rights so you can customize the page and then remove them when your finished. There is an option to allow customize views in the group account settings.

shaun_9999

Another question: can I import anything from an old solarwinds server to a new one?

I don't want any of the historical data, reports, alerts, or other as I feel all of that is either redundant, out of date or other. I have also discovered that some nodes that are systems critical are not being monitored (corrected today though) what I would like are the pieces I have done: eg - monitoring clustering, customer facing logons, ect. Any knowledge I have wrote down so that when I get my new servers I can build and deploy with less clutter.

jamesatloop1

Just the nodes really, thats about it.