Security

Ask something
Question Locked

PC Anywhere and domain authentication

0 helpful
6 replies

by jorgen.uller

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

Im getting a bit desperate here and hopefully someone can help me :)

I need to use PC Anywhere with Microsoft AD authentication. So far all good, now to the problem. The machines i want to remote control, is for special reasons, not member of the domain itself.

This makes it impossible for PC Anywhere to find the apropriate user accounts.

Any thought on how to accoplish this?

I have one other idea and that is to control it by a local security group on the computer and then add members from the domain to that group but im unsure how/if this is possible.

Om running PC anywhere 12.0 and a combination of W2K and WinXP (mostly XP).

BR
J?rgen

6 replies

by oh smeg

Using PC Anywhere with AD Authentication is OK but why do you want to use this setup on computers not connected to the Business Domain?

If they are not members of the Domain they will not have AD Authentication as that is handled by the Domain Controller or at the very least whatever controls the AD in the Domain.

With several Medical Programs that use PC Anywhere they remotely connect to the Client Computer either through Dial Up or a VPN and work quite happily that way but they don't use AD Authentication.

With these Medical Applications the Company maintains security by using Dial Up they send a e-mail out about a week in advance and then ring up the operator and get them to accept the dial up connection then update the software as required remotely. But they can never access these systems when the feel like it PC Anywhere is always set to prevent unattended connections.

I'm not sure what you are trying to achieve here sorry.

Col

by jorgen.uller

The reason for wanting this setup is becouse its quite alot of PC Anywhere host (around 20-30) and alot of different people needing acces i thought the easiest (and most secure) way would be by using the AD for authentication.

It will be easier to manage for the administrator, and also easier for the user becouse they can use their normal username and password to access the remote host.

We cant use your setup becouse there is simply no personal at the remote hosts.

The bottom line is, i need a secure way off authentication with as little administrative effort as possible. And if PC Anyway would just let me log in to the Active Directory there would be no problem in adding the access groups that i need...

I hope this clearified the matter...

by oh smeg

You would have to have the remote units altered there where they are instead of attempting to alter them remotely to do this.

While it's sounds nice the reality is that what you want to do is inherently insecure and may be fine depending on who the remote stations are connected to. But if there is any form of Compliance that these workstations have to comply with this alone will void the Compliance as there is no way to control when an outside source logs in. The location that these Remote Requests are arising from also have no protection as it would be possible to log into a system by mistake and do things either unwanted or deliberately to break thing depending on the operator doing the changes.

All of the Compliancing Authorities here recommend PC Anywhere because this isn't possible to do with that product so Security is Maintained. Not sure about other places that use PC Anywhere as I've never been asked to use in in a Non Complaining Environment.

Col

by jorgen.uller

Im guessing that its not possible to do what i want to. But the host are connected to the WAN/Lan and not on the internet. They are just not part of the domain... But ive been reading up on other sources and it seems either i have to manage them one host at a time, or join the computers in the domain.

Thanks for you info anyway!

This discussion is closed to new replies.