For NetSupport Manager version 14 the ADMX files supplied were updated to include a number of policy changes. This included a change in behaviour relating to how the User validation policies were applied, when configuring the NetSupport Client to require NT or AD Authentication.
In earlier versions of NetSupport Manager prior to v14 there was a separate policy for each Client authentication type, from version 14 of NetSupport Manager this was changed to a single policy to allow you to choose the authentication mode to enforce on your NetSupport Manager Client devices.
An issue had been found with the initially supplied ADMX template files that meant both the AD and NT Group name fields included on this single policy were being required.
To resolve this behaviour updated versions of the NetSupport Manager Client ADMX template files have been released and are available to download from the following link : Here
New template changes
Within the new ADMX template files there is a new policy to allow you to first choose the authentication mode you wish to apply to the NetSupport Manager Client.
NetSupport Manager Client Settings > Master Profile > Security > User Validation > “User Validation modes (NT or AD Client Authentication)”
When enabled this policy will allow you to choose which authentication mode to apply to the NetSupport Manager Client. Once you have selected the authentication mode it is then required to enable a second separate policy to configure either the AD or NT Group names you wish to allow access to connect to the Client. The Group name policy you enable will need to match the Authentication mode selected in the first policy. These policies will be found in the below locations :
NetSupport Manager Client Settings > Master Profile > Security > User Validation > AD Group details >
“AD authentication Group names”
OR
NetSupport Manager Client Settings > Master Profile > Security > User Validation > NT Group details >
“NT authentication Group names”
Example
For example if you wish to configure access for members of an AD Group name “NSM Control Users” to the NetSupport Manager Client you would perform the below :
- Navigate to the following policy location : NetSupport Manager Client Settings > Master Profile > Security > User Validation
- Enable the policy “User Validation modes (NT or AD Client Authentication)”
- Within the policy set the drop down menu to “Authenticate User and Password with Active Directory”
- Next navigate to the following policy location : NetSupport Manager Client Settings > Master Profile > Security > User Validation > AD Group details
- Enable the policy “AD authentication Group names” and with this policy specify the name “NSM Control Users”
Once the above policies have applied to the Client machine, only members of the AD group named “NSM Control Users” will be permitted to connect to the NetSupport Manager Client.