6.7 Understanding User Matching
User Matching allows you to apply policies to specific users (login accounts) or to specific workstations.
6.7.1 User Matching Conditions
All WebMarshal Rules and Rule Containers can include one or more of the following User Matching conditions.
6.7.1.1 Where the user is a member of User Group
If this User Matching Condition is selected, the Rule will apply to all members of the User Group(s) listed in the Rule Description pane with this condition (except for members of any of the exception groups, as described below).
To add or edit User Groups in this condition:
1.Click a UserGroup link to open the User Matching Condition window.
2.In this window, you can select an existing user group. You can also create or import a new group. If you create or import a group, it is selected for use when you return to the User Matching Condition window.
|
Note: If your WebMarshal installation allows more than one type of authentication, remember to include all authentication types in Rules. For instance, if both Windows and IP authentication are enabled, User Matching should include both user names and workstation names as appropriate. |
6.7.1.2 Except where the user is a member of User Group
If this User Matching Condition is selected, the Rule will not apply to any member of the User Groups listed in the Rule Description pane with this condition.
To add or edit user groups in this condition:
1.Click a UserGroup link to open the User Matching Condition window.
2.Select existing or create new groups as described above.
This condition overrides the previous condition. For instance, a Rule might start:
Where the user is a member of Staff, except where the User is a member of Executive
|
Note: Exception based rules are the key to good resource management. General rules should cover most cases; use exceptions for small groups. You can also use an exception condition alone (for instance, For any User, except where the User is a member of Executive). |
6.7.1.3 Where the server is a member of Server Group
If this Condition is selected, the Rule will apply only for requests processed on the WebMarshal Processing Servers contained in the Server Group(s) listed in the Rule Description pane with this condition (except for members of any of the exception groups, as described below).
|
Note: Server Group conditions allow you to enforce different policies at different locations in a large distributed installation. |
To add or edit Server Groups in this condition:
1.Click a ServerGroup link to open the Server Condition window.
2.In this window, you can select an existing server group. You can also click New to start the New Server Group wizard and create a server group, as described in “Configuring Server Group Properties”. If you create a new server group, it is selected for use when you return to the Server Matching Condition window.
6.7.1.4 Except where the server is a member of Server Group
If this Condition is selected, the Rule will not apply for requests processed on the WebMarshal Processing Servers contained in the Server Group(s) listed in the Rule Description pane with this condition.
