Vector PC-Duo Technical Information download pdf (Page 145)

Command Line Configuration

145

Lock-down settings

Use the Host lock-down feature to set individual settings to permanent values.

 "Lock Host settings"

 "Unlock Host settings"

The lock-down feature differs from setting permissions in several ways:

 Settings lock-down is granular. Individual settings can be locked down. The security

features work on groups of settings, not individual ones.

 Settings lock-down is permanent. Once a setting is locked down, it cannot be changed

again (without resetting the entire lock-down). The security features control who can

change different groups of settings, but do not restrict the specific changes that are

allowed.

 Settings lock-down is extremely secure. Because of the security applied to the registry

key, only members of the authorized administrative group can remove the lock-down. If

the group is a domain-level group, local administrators of a computer cannot change the

lock-down policy.

Lock Host settings

Lock down one or more the Host settings, so that any the Host users (even users who

have administrative privileges) cannot modify them. You must first create and then be a

member of a group named Remote Control Host Admins to lock down any the Host

settings. This group can either be a local (computer-specific) group or a domain group.

For NT compatibility (which doesn‟t support a group name of this length), use the name

RC Host Admins. If this is the case, then you must either be a member of RC Host

Admins or Remote Control Host Admins.

To lock down any the Host settings, run the PHSETUP program with the special

name/value pair mode:lockdown as the first entry on the command line. Follow this with

a list of settings that you want to lock down, along with their values. For information on

using PHSETUP, see “Configure Host from the command line”. When you are finished,

stop the Host service from Control Panel > Administrative Tools > Services, and then

restart it to activate the lock-down.

The affected settings are visible but disabled in the Host. Once settings are locked down,

you can lock down other settings by running PHSETUP with the mode:lockdown

keywords, and include additional feature/value pairs.

NOTE: Some settings must be locked down together. In particular, locking down one

network protocol locks down all network protocols. For example, if you run PHSETUP

mode:lockdown ipx:off from the command line, IPX is never enabled, but

additionally the IP setting is completely locked.

Unlock Host settings

Locked down settings must be unlocked all at once. Settings cannot be unlocked

individually.

To unlock Host settings, execute the following command line string:

phsetup mode:lockdown mode:reset

1 2 ... 140 141 142 143 144 145 146 147

Comments to this Manuals

No comments

Vector PC-Duo Technical Information Page 145

Comments to this Manuals

Related products and manuals for Servers Vector PC-Duo