6.3 Configuring Administrators for Pair Management

Pair management refers to the management actions taken on Dynamic File Services objects, such as pairs, policies, schedules, and cloud accounts. Any user with sufficient rights can manage the objects. The Administrator user of the server automatically has rights to manage any aspect of Dynamic File Services. In an Active Directory domain, Domain Admins also have these rights across all servers in the domain.

You can allow administrator and non-administrator users to manage pairs, policies, and schedules by adding them as members of the Dynamic File Services group. Any user that is a member of this group has all rights that are needed to create, delete, and manage pairs, policies, schedules, and cloud accounts. The user that installs Dynamic File Services software on the computer is automatically added to the group.

This section describes the Dynamic File Services group and how to add and remove members.

6.3.1 Understanding the Dynamic File Services Group

You can set up a group of users to manage pairs and policies on Dynamic File Services servers by adding them as a member of the Dynamic File Services group. The nature of the group and its setup are different, depending on whether the server is located in an Active Directory domain or in a Workgroup. This section describes their purpose and differences.

How is the group created?

The Dynamic File Services group is created automatically during the installation of Dynamic File Services. The user that installs Dynamic File Services software on the computer is automatically added to the group.

  • Active Directory Domain: The group is created in the Active Directory Users area when Dynamic File Services is first installed on a server that is a domain controller or member server in an Active Directory domain. The group is used by all DynamicFS servers that are subsequently installed in the same domain.

    The user that installs the first instance of Dynamic File Services in the domain must have sufficient domain privileges to create groups and manage members of groups. Otherwise, the group creation fails and a user with Domain Admin privileges must set up the group manually.

  • Workgroup: The group is created locally in the Windows Local Users and Groups > Groups area.

    The user that installs Dynamic File Services must have sufficient Administrator privileges to create groups on the server. Otherwise, the group creation fails and a user with Administrator privileges must set up the group manually in the appropriate location.

Who controls membership in the group?

The login identity of the user who installs Dynamic File Services is automatically added to the Dynamic File Services group. After the installation, administrators control which users are added or removed as members of the Dynamic File Services group.

  • Active Directory Domain: The Domain Admin user or a domain user with Domain Admin privileges can add or remove members. Launch the Active Directory Users and Computers tool, then add or remove members for the group in the Users folder. For information, see Section 6.3.2, Setting Up Administrators in a Domain.

  • Workgroup: The Administrator user or a local user with Administrator privileges can add or remove members. Launch the Microsoft Management Console on the server, then add or remove members for the group in the Users and Groups > Groups folder. For information, see Section 6.3.3, Setting Up Administrators in a Workgroup.

Who can be a member of the group?

The Dynamic File Services group has one default member, which is the user who installs the Dynamic File Services software on the computer. Other users can be members in the group, depending on whether the DynamicFS server is in an Active Directory or Workgroup environment:

  • Active Directory Domain: Members of the Domain Admins group automatically have rights to manage Dynamic File Services on any server in the same tree or forest. Any domain user in the same tree or forest as the DynamicFS server can be added to the group. A domain user does not need Domain Admin privileges in order to be a member, and it is not necessary to explicitly add a Domain Admin user to the group. The members can manage pairs, policies, and schedules on any DynamicFS server in the same domain.

  • Workgroup: The Administrator user and members of the Administrators group automatically have rights to manage Dynamic File Services on the server. Any local user an be added to the group. A local user does not need Administrator privileges in order to be a member, and it is not necessary to explicitly add the Administrator user to the group. The members can manage pairs, policies, and schedules on the DynamicFS server.

How is the group removed?

The Dynamic File Services group should not be removed while the product is installed. The following sections describe how the group is removed in an Active Directory or Workgroup environment:

  • Active Directory The group is used by all DynamicFS servers that are subsequently installed in the same domain. The group is removed when you uninstall the last instance of Dynamic File Services in the domain.

    The user that uninstalls Dynamic File Services must have sufficient domain privileges to delete groups. Otherwise, the group deletion fails and a user with Domain Admin privileges must manually remove the group.

  • Workgroup The group is automatically removed from the server if you uninstall Dynamic File Services.

    The user that uninstalls Dynamic File Services must have sufficient Administrator privileges to delete groups on the server. Otherwise, the group deletion fails and a user with Administrator privileges must manually remove the group.

6.3.2 Setting Up Administrators in a Domain

In a domain environment, members of the Dynamic File Services group can manage pairs, policies, and schedules on any of the DynamicFS servers in the domain.

To add or remove domain users as members of the domain-based Dynamic File Services group:

  1. Log in to the DynamicFS server as a Domain Admin.

  2. Open the Active Directory Users and Computers utility by selecting Administrator Tools > Users and Computers.

  3. Select the domain, then select Users > Groups.

  4. Open the group’s Properties dialog box by double-clicking the Dynamic File Services group.

    You can also right-click the group and select Properties. Current domain users that are members of the group appear in the list.

  5. In the Properties dialog box, click the Members tab.

  6. Configure the members of the group by doing either or both of the following tasks:

    • Add a member: Click Add, use the Enter the object names to select field to specify the users you want to manage DynamicFS in the domain, then click OK to save and apply your changes.

    • Remove a member: Select one or more user names from the member list, click Remove, then click OK to save and apply your changes.

  7. Click OK to close the Dynamic File Services group Properties dialog box.

6.3.3 Setting Up Administrators in a Workgroup

In a Workgroup environment, members of the server-based Dynamic File Services group can manage pairs, policies, and schedules for a Dynamic File Services server.

To add or remove local users as members of the server-based Dynamic File Services group:

  1. Log in to the DynamicFS server as the Administrator user or as a user with Administrator privileges.

  2. Open the Windows Computer Management tool.

    Right-click the Computer icon on the desktop, then select Manage.

  3. Select Local Users and Groups > Groups, then double-click the Dynamic File Services group to open the group’s Properties dialog box.

    Current members appear in the list.

  4. Configure the members of the group by doing either or both of the following tasks:

    • Add a member: Click Add, use the Enter the object names to select field to specify the users you want to manage DynamicFS on that server, then click OK to save and apply your changes.

    • Remove a member: Select one or more user names from the member list, click Remove, then click OK to save and apply your changes.

  5. Click OK to close the Dynamic File Services group Properties dialog box.