System > Check-in Policy

Show me an explanation of the items on this page.

What is the function of Group Policy?

The Group Policy allows master administrators to set parameters on the different functions set by standard administrators. These parameters prevent administrators from making changes to the system that may cause performance degradation and place unnecessary load on the server.

The Group Policy allows master administrators to set the parameters of the following functions:

How do I set Group Policy parameters?

To set policy parameters for a group or set of groups:

1. The Group IDs column will list all the groups administered by the server. Select the group you would like to apply policies to by selecting the checkbox next to the group ID. More than one group can be selected if you wish to apply the same settings to multiple groups.

2. In the following fields, enter the minimum and/or maximum parameters:

3. Press update.

4. The minimum and maximum settings are displayed in the KServer, Stats, Log Age, Full, and Quick columns.

Note: The KServer column will display Editable if the Primary/Secondary radio buttons are selected in the Admin Defined field. This designates that the KServer settings have been relegated to the settings specified by an administrator in the Primary KServer and Secondary KServer settings in the Check-In Control function of the Agent feature tab. Otherwise, the IP address/host name entered in the KServer Address Fixed field will be displayed, and thus cannot be changed by an administrator in the Check-Control function.

How do I remove a setting from a field?

To remove a setting from only one field:

1. In the field that you want removed, enter 0 (zero).

2. Leave all other fields blank.

3. Press update.

The setting is update in the client list view. All other settings remain untouched.

How do I prevent agents from automatically creating new accounts when they first check in?

Uncheck Allow automatic account creation for groups without a policy to block agents checking in for the first time from automatically creating new accounts in a group without any policy set. Typically you will leave this box checked to allow anyone to quickly load up an agent and get that agent checking into your server. Allowing automatic account creation is not a security problem because the person is effectively giving you full control over there system without gaining any access to your server.

Note: Automatic account creation is enabled by default.

How do I make a change to only one field at a time?

If you need to make a change to only setting in a group:

1. In the field you want changed, enter the new value.

2. Leave all other fields empty. This indicates that these fields will remain unchanged.

3. Press update.

Only the field whose value was changed is updated. All other fields retain their original setting.

Explanation of items on this page

The Group Policy function allows master administrators to set parameters for a variety of functions. These settings can prevent standard administrators from configuring settings that place undue stress on servers running the kserver service. Defining a minimum Quick Check-In period, for example, prevents standard administrators from entering a value that would overload the server with multiple simultaneous check-in requests.

The Group Policy also allows master administrators to place limits on the quick check-in times of deployed Agents, as defined in the Check-In Control function. This prevents other administrators from entering values that may overload the server with constant check-in requests.

The following elements are displayed in the Group Policy function:

Set Max Age for Log Entries

Sets the minimum and maximum value allowed for the Max Age in the Check-In Control function.

Quick Check-In Period

Sets the minimum and maximum value allowed for the Quick Check-In in the Check-In Control function.

Admin Defined

Selecting either the Primary and/or Secondary radio buttons sets the primary and/or secondary server IP/host name addresses to the value specified in the Primary KServer and Secondary KServer fields in the Check-In Control function (Agent tab). Selecting these radio buttons allows standard administrators to control these settings independently.

KServer Address Fixed

Selecting the radio buttons and entering an IP/hostname address in the KServer Address Fixed fields prevents standards administrators from changing the settings specified in the Primary KServer and Secondary KServer fields in the Check-In Control function (Agent tab).

Allow automatic account creation

You can enable/disable automatic account creation on a per Group ID basis. Accounts are automatically created when the Automatic Installation Package is run.

Allow automatic account creation for groups without a policy

Uncheck this box to block agents checking in for the first time from automatically creating new accounts in a group without any policy set.

Note: Automatic account creation is enabled by default.

Update

Pressing Update enters all of the changes for the selected group(s). To change only the minimum or maximum setting in each field, ensure that the field that is to remain unchanged is empty before pressing update. Entering a '0' in any field and pressing update clears the field.

Select All/Unselect All

Select All will select all groups on all account pages. Unselect All will unselect selected groups on all account pages. To select an individual group, select the checkbox next to the group ID.

Groups IDs

Shows all groups administered by the administrator currently logged in to the system, as shown in the upper left-hand corner of the console window.

KServer (1st/2nd)

Shows the IP addresses/host names of the primary(1st) and secondary(2nd) servers used by the specified group(s). These settings are edited using the Admin Defined and KServer Address Fixed fields, shown above. If Editable is shown, the primary and secondary server addresses are configurable by the group's administrator in the Check-In Control function (Agent tab).

Log Age (Min/Max)

Shows the settings entered in the Set Max Age For Log Entries fields, as shown above.

Quick (Min/Max)

Shows the settings entered in the Quick Check-In Period fields, as shown above.

Select All/Unselect All

Select All will select all admin accounts on all account pages. Unselect All will unselect selected admin accounts on all account pages. To select an individual admin account, select the checkbox next to the username.