Group Membership
This topic describes types of membership groups and how to establish them.
IT administrators can create user and group accounts. The names of the users associated with specific groups appear in the Members table on the primary page for each group, which is accessible via Group Management in the Privilege Manager left navigation pane. The Type field in the Members table displays the managed user status. More specifically, the Type field can include the following memberships:
-
Domain Group
- Group of users from AD
-
Domain User
- Single users from AD
-
Built-in
- User shipped with the OS
-
Managed User
- User actively managed by Privilege Manager
-
Named User
- User manually added to the group by name and, therefore, not selected from an existing list of users.
-
Unmanaged User
- User that is inventoried or formerly Managed
Each membership comprises distinct users, and each membership is significant. The Domain Group, Domain User, and Built-in user memberships populate the Type field based on the explanations above.
In the spirit of ensuring a solid understanding, this topic focuses on the Managed User, Named User, and Unmanaged User, which are a subset of the Local User category. This topic provides insight and clarity on how each populates the Type field.
User Management
To add a user:
- Navigate to Windows Computers | User Management.
- Click Create User.
- From the Create Managed User window, enter a Username.
- Click Create. A new page opens, displaying User Details.
- Slide the User Managed/Not Configured switch to the right or Yes position, thereby applying this account across all endpoints in the computer group. This action also reveals additional fields.
- Click Edit to modify the Initial Password.
- Type a password in the first field and, in the second field, confirm the password by retyping this entry. The password must include an uppercase letter, lowercase letter, number, and symbol.
- Click Save Password.
- Click Save Changes. The Save Changes button becomes a More drop-down list box. You can click More and choose Delete to remove this account if needed.
Group Management
Managed User
To establish and view a Managed User:
-
Navigate to Windows Computers | Group Management.
-
Click Create Group.
-
From the Create Managed Group window, enter a Group Name.
-
Click Create. A new page opens, displaying Group Details.
-
Click Add Member.
-
From the Type drop-down list box in the Add Members window, select Local Users.
-
In the lower section of the window, scroll then find and select the checkbox associated with the user you added.
-
Click Add Member.
-
System functionality returns to the previous page. From the Members table, you can view the record associated with the user you added. Managed User appears in the Type field associated with this user.
-
Click Save Changes.
A message appears: Group membership changes will occur automatically when the endpoint receives the policy or when any membership changes occur directly on the endpoint.
-
Click Yes to proceed.
Named User
To establish and view a Named User:
-
Navigate to Windows Computers | Group Management.
-
Click Create Group.
-
From the Create Managed Group window, enter a Group Name.
-
Click Create. A new page opens, displaying Group Details.
-
Click Add Member.
-
From the Add Members window, click Local Users (Manual Entry).
-
Enter one name per line, if adding multiple users.
-
Click Add Member.
-
System functionality returns to the previous page. From the Members table, you can view the record associated with the user(s) you added. Named User appears in the Type field associated with this user.
-
Click Save Changes.
A message appears: Group membership changes will occur automatically when the endpoint receives the policy or when any membership changes occur directly on the endpoint.
-
Click Yes to proceed.
Unmanaged User
To establish and view an Unmanaged User:
-
From the left navigation pane, click Group Management then select a group.
-
Access the Members table and click the Managed User you created.
-
System functionality launches you to the User Management page for this user.
-
Slide the User Managed switch to the left or No position.
-
Click Save Changes.
-
Click the Back to breadcrumb link near the top left of the page.
-
The Type field now displays Unmanaged User.