Remote Management Rights
A majority of the remote management features are available to users and administrators via rights in the eDirectory tree on the objects that represent the target device. For example, in order to remote control a target workstation, you can configure ZENworks such that one must have rights in the target Workstation object in order to perform the remote control function.
You must grant individual rights in the tree in order to enable users to perform remote management functions on workstations and user desktops. The following objects in the tree can be granted remote management rights: User, Group, Organizational Role, Organization, Organization Unit, Country, Locality, [Root], and [Public]. Two methods exist that you can use to set up these rights. The following subsections discuss these methods.
Remote Operators Page
A Remote Operators Page is associated with each Workstation object. Figure 3.7 displays this page.
Figure 3.7 Remote Operators page in a Workstation object.
From within this page, you can add users or groups to the list of operators. With each addition, you can check which of the remote management utilities this addition has rights to perform. The choices available are Remote Control, Remote View, File Transfer, Remote Execute, Remote Wakeup, and Diagnostics. Check the box to grant the user or group the rights to perform these functions on this particular workstation.
You can also discover who in the tree has rights to perform some remote management on a specific workstation. You can do this by selecting a workstation in ConsoleOne and running Remote Management Rights from the Tools menu, or by pressing the Display button on the remote operators page of the Workstation object. When this program is activated, it displays a report detailing who has rights to which portions of rights management. A sample output report is shown in Figure 3.8.
Figure 3.8 Report of rights management on a specified workstation.
With ZENworks for Desktops 4, you can also set a remote control policy that allows you to remote control without a workstation object and without the need to have rights on the object to perform remote control. This option is called Password-based Remote Management and it allows you to remote control a workstation by selecting Tools, Remote Management, Windows from the ConsoleOne tools menu. When prompted, you must enter the IP address of the workstation along with a user password.