[sims] Sims Trusted Users

[ajg]

Hi, am just looking at trialing using Sims trusted users here. I have made the necessary changes to both a test user and PC and all works OK but was wondering if once a user has been set to Trusted Authentication is it possible to still log on as them manually on another PC that has the connect.ini file without the Connectiontype=Trusted? If you enter there original username and password it just errors and doesn't let you enter the DOMAIN\Username info that shows as their new username in System Manager once they are set as a trusted user? Thanks in advance.

[Steve21]

As far as I know you can't, but not quite sure why you'd want to either.

 

Either you want people to automatically login without needing username/password, or you want the security layer so leave it off?

 

(Unless you get into the 2 seperate accounts etc)

 

Steve

[vikpaw]

No you can't, the login box won't accept the domain part which is part of the trusted login. At least that's what I found. Just username isn't enough, and \username causes an issue due to the back slash. However, other systems, I believe Schoolscomms was one of them, accept domain\username in their configuration, so I presume the API allows usernames formatted in that way.

 

The only time I felt the need for this was if a) you want to log in as them, or b) they need to quickly do a Sims task while someone else is logged in.

Generally it wasn't needed - we only implement for Admin, and usually they are logged in and we want it secured that way.

 

One useful thing I did was set the connect.ini to Trusted not Trusted auto and in this way, they can click OK to auto login, but if i need to go and login as me using admin credentials, i can take the manual route. So either don't set your system manager account to trusted, or make a backup account that you can use in the field. This was extremely handy when troubleshooting.

 

Also with that method, you can do a partial roll-out, so some staff, e.g. admin have trusted logins, whereas teaching staff can login with username and do stuff on a PC logged in as someone else. This is great where there are multiple teachers in the same class, a TA is in the room, or a room is shared say for 5 mins reg in the morning, or something like that.

[ajg]

Thanks both. This is pretty much the answer I expected from my own testing. As you say vikpaw my main reasoning behind this question was I could see it being useful for troubleshooting etc. I think a combination of trusted and some non-trusted accounts will probably be the way to go for us. Many thanks for the advice.