Introduction
I am trying to check how Windows User Group registered to Sharperlight is dealt when I login.
It was in case of the Windows Group holds my windows user account, but my user account is not registered to Sharperlight.
The Current Settings
Sharperlight Users
My windows account {MyPCName}\MikiY is a Windows Admin user, and it is also registered to Sharperlight so when I used the account to login to Windows and access to Sharperlight, I can login to Sharperlight without inputing any credentiales.
The following users are registered in Sharperlight Site Setup.
{MyPCName}\MikiY user
This user is Windows (Domain) Admin user, and also Admin for Sharperlight.
admin user
This is a named user for Sharperlight and not a Windows user, and it has admin right for Sharperlight.
If an admin user for Sharperlight gets disabled when it is only one admin user, you will get in trouble.
I think that it is better to have multiple admin users with password protected.
Windows User Groups and Users
Let's have a look the Windows User Groups here.
Finance Group
Finance A, B, C and MikiY(Local Admin) users belong to this group.
Consulting Group
Consultant X, Y, Z and MikiY(Local Admin) users belong to this group.
Importing Windows User Groups to Sharperlight
Let's import the Windows users to Sharperlight with Sharperlight Site Setup
Choose a template from the existing users, the all settings of this selected template will be applied to all imported users or groups as default.
Set the domain name where we want to import users or groups from.
After clicking the OK button, this list will be generated.
Users are picked up from the specified domain, and this list is generated.
Only Windows Users are picked up as default and not user groups from the specified domain, we can amend the list if we want to import Windows User Groups only.
I modify the list as shown below.
Then click OK to import.
Now we can see the Windows User Groups are in Sharperlight.
Verification
Sharperligh has now two Windows User Groups and one Windows User which is my user account.
They are all enabled and I am on Windows with my account, i.e. {MyPCName}\MikiY
In the case of my Windows user account being registered in Sharperlight, when I open Sharperlight Query Builder, I can go in without any permission as I am already accepted by Windows.
There is a way to check which user is currently used.
You can choose Information from the right-click menu with the Products lookup dialog in Query Builder.
Then you should be able to see the details here. As you can see, {MyPCName}\MikiY is used.
As the next check, I disable my account {MyPCName}\MikiY in Sharperlight, and try to open Query Builder.
Put X at the end of the account name like this to brake the link between the user currently logged in to Windows and the Sharperlight user.
Then log in to Query Bilder and check the information.
It says that my user account currently on Windows is passed to Sharperlight and those Windows user groups are used to get me in as they both have my user account.
Conclusion
This is how Windows User Group and Users works for Sharperlight, and this is a way to manage users at Windows side and not Sharperlight side.