Configuring permissions and groups (Windows Server 2003 domain controller)

If Microsoft Windows Server 2003 is a domain controller, you must complete these tasks to configure users and groups to access IBM® InfoSphere® Information Server. This configuration is required only for the engine tier computer and is only applicable to the users of the operating system where the engine tier components are installed.

Procedure

Because you cannot add the built-in authenticated users group to a group that you create in steps 2 and 3, you might prefer to skip steps 2 and 3 and use the authenticated users group directly.

1. Log in to Microsoft Windows Server 2003 as an administrator.
2. Configure the server to allow local users to log in.
   1. Click Start > Control Panel > Administrative Tools > Domain Security Policy.
   2. In the Domain Security Policy window, expand Local Policies > User Rights Assignment to display the policies.
   3. In the Domain Security window, click the Allow log on Locally policy, and click Actions > Properties.
   4. In the Allow log on Locally Properties window, click Add User or Group.
   5. Click Browse.
   6. In the Select Users, Computers, or Groups window, click Advanced and then click Find Now.
   7. In the search results, click Authenticated Users, and then click OK three times to return to the Domain Security Policy window.
   8. Close the Domain Security Policy window.
3. Create a group.
   1. Click Start > Control Panel > Administrative Tools > Active Directory and Computers.
   2. In the Active Directory and Computers window, click Users in the current domain.
   3. In the window that opens, click Action > New Group.
   4. In the New Group window, type the name for the group.
   5. Leave Group scope as Global and Group type as Security.
   6. Click OK
4. Add users to the group.
   1. In the Users in the current domain window, click the name of the group that you want to add users to, and click OK. Authenticated users are not available.
   2. Click Action > Properties.
   3. In the Properties window, click the Members tab, and then click Add.
   4. In the window that opens, click Advanced, and then click Find Now.
   5. Click the names of users that you want to add to the group, and then click OK. Authenticated users are not available.
   6. Click OK two times to save your results and to return to the Active Directory and Computers window.
   7. Close the Active Directory and Computers window.
5. Set permissions on the server folder.
   1. In Windows Explorer, locate the server folder. The default location is c:\IBM\InformationServer\Server.
   2. Click File > Properties.
   3. In the Properties window, click the Security tab, and click Add.
   4. In the Select Users, Computers, or Groups window, click Locations.
   5. In the window that opens, click Advanced, and then click Find Now.
   6. Click the name of the group that you want to set permissions for.
   7. Click OK, and then click OK again.
   8. Click the name of the group that you want to set permissions for.
   9. In the Permissions list, locate Modify.
   10. Click Write in the Allow column for this item, and click OK.
   11. If you receive a message to confirm your changes, confirm by clicking Apply changes to this folder, subfolders and files.