Product Documentation

Configure console users

Aug 08, 2014

The License Administration Console can use License Administration users, local Windows users and groups, and Active Directory users and groups. The Citrix Licensing Manager can use local Windows users and groups and Active Directory users and groups. The License Administration Console manages them all. These users are not connected to the computer's local users.

The Active Directory users and groups are part of an Active Directory/network authentication system. To support Active Directory users and groups, the Windows license server must be a member of a Microsoft Active Directory domain and must be running the License Administration Console. Windows NT domains are not supported.

Note

The License Server VPX does not support Active Directory or the Citrix Licensing Manager.

Users are configured with local roles. All users are created as administrators and can:

  • View the Dashboard for license activity and alerts.
  • Change their own password. Active Directory users and groups do not have passwords associated with them. They contact Active Directory to be authorized and follow standard Active Directory user password policies.
  • Select a console display language.
  • Change their own password.
  • Select a console display language.
  • View system information.
  • Add and delete users and expire their passwords. You can expire passwords for local users only.
  • Configure alerts.
  • Configure the license server.
  • Configure the vendor daemon.
  • Stop the license server after you have made changes to it.
  • Configure the administration console.
  • Configure, and add licenses with, the Citrix Licensing Manager.

Administrators must enter user name and password when opening the Administration area. Settings in Server Configuration allow you to optionally secure the Dashboard by requiring users to log on. If Password Protected Dashboard is enabled ALL users accessing the License Administration Console must log on.

What types of accounts are added at installation

A default administrator account is created during installation of the License Administration Console. Use the administrator account to first log on to the console and then configure additional users.

During installation of the License Administration Console, accounts are added based on machine membership. For workgroup machine installations, computer\InstallUser and BUILTIN\Administrators are added. For Active Directory installations, domain\InstallUser and BUILTIN\Administrators are added. You can remove any of these accounts after installation, but ensure that there is at least one administrator.

Note

If an "admin" user remains after an upgrade, the domain administrator can delete that user.

Add locally managed users

  1. Click Administration and then the User Configuration tab.
  2. Click New Users.
  3. Select Locally Managed Admin from the drop-down menu.
  4. Type information based on the Role chosen. Required fields are identified with an asterisk (*).
    • User names are case sensitive and cannot contain a backslash (\).
  5. Optionally select the User must change password on next logon check box to force the user to create a new password.

Add local Windows users and domain users and groups

  1. Click Administration and then the User Configuration tab.
    1. If you are adding domain users or groups, click Domain Users/groups.
  2. Click New Users.
  3. Select a role from the drop-down menu.
  4. Type information based on the Role chosen. Required fields are identified with an asterisk (*).
    • Users and groups must be created as domain\user (domain can refer to a machineName) or domain\group.
    • Local Windows users must be created as computer\user.
    • For domain users, names are converted to upper case and stored. An upper case domain user name (for example, TEST\HARVEY) can coexist with a lower case local user name (for example, test\harvey), but an upper case domain user cannot coexist with an upper case local user name.

Change a user password for locally-added users

  1. On the User Configuration page, click Edit in the line containing the user's record.
  2. Type and confirm the new password.
  3. Optionally select the User must change password on next logon check box to force the user to change the new password.