Security

Accessing security settings

1. Right-click the Host icon in the system tray and select Settings for Host:
2. Click Settings for Host and select Security from the menu:

Authorization method

In the main security settings window you specify exactly how you want to access this Host. There are two authorization methods available — Remote Utilities own security and Windows security.

• Remote Utilities security – use Remote Utilities own authorization method (default choice)
  • Change password – set/change master password for accessing this Host. Initially, you are asked to set your access password during installation
  • Users and access control – add multiple users with each user having their own login, password and permissions
• WinNT security – use Windows or Active Directory account credentials to connect to this Host
  • Permissions – click to invoke Windows "Permissions" dialog, select users or user groups and set access permissions (see Setting Windows security permissions)

Users and access control

If you selected Remote Utilities security as your authorization method and set the master password, you can always access your Host with that password. However, you can create additional users and set permissions for them. Each user will have a login and password and an associated set of permissions.

To create a user:

1. In the main security settings window, click Users and access control link:
2. Click Add and enter a user name and password.
3. (Optional) Enable the Ask user permission option for this user if necessary.
4. Click OK. The newly-created user will appear in the user list:
5. Set access permissions for the selected user. In this example the user "John" is allowed to connect to this Host using the View Only and File Transfer connection modes. Other modes will not be available for this user.

   Important!

   Permissions for individual users can be overridden by global permissions set on the Modes tab.

6. Click OK to save the settings.

Setting Windows security permissions

Instead of using the Remote Utilities default authorization method, you can utilize existing Windows and/or Active Directory accounts to authorize on this Host.

1. In the main security settings window, select the WinNT security radio button and click Permissions:
2. Click Add...
3. Select Windows accounts which you want to grant or deny access to the Host and click OK.
4. Select an account in the list and set permissions for this account below.
5. Click OK to save the settings.

Advanced settings

Click the Advanced button to access additional security settings.

Confirmation tab

Use the Confirmation tab to enable the Ask user permission option.

IP-Filter tab

Restrict access to this Host for a specific IP address or IP address range.

• Allow everyone, except – add an IP address or range to the white list
• Deny everyone, except – add an IP address or range to the black list
• Edit – click to specify an IP address or a range

Host authority tab

In the Host authority tab you can set a shared secret that provides the means of verifying identity of the Host.

A shared secret is an alphanumeric code that you can generate on the Host and then add to the corresponding Viewer connection properties. Every time a remote session is about to start, Remote Utilities will check the shared secrets on both ends. If they are not identical, the connection will be refused.

Modes

Use the Modes tab to globally allow or deny specific connection modes when connecting to this Host.