Configure AD based authentication

Assuming that the AD server details have been set and that the Protex server has been successfully joined to the AD Domain the next step is to assign Protex filter profiles to the relevant AD groups. At least one group/filter pair must exist before NTLM authentication will work correctly.

If you only want to log usernames and not change filtering profile by the user's AD group you still need to add an entry here. Just assign any group to the same profile that is used for the default.

Initially the dialogue box will appear as above with no domain/filter pairs (a mapping). The drop-down menu on the LHS contains a list of all the available NTLM groups while the RHS menu contains a list of filter profiles. To create a new mapping select the appropriate group from the LH menu and the profile you want to assign to users in that group from the RHS menu. Clicking the New Line button will add this selection to the list and give you a new pair of dropdowns and Save Changes will write the changes to disk. Any changes will not be active until the Apply Changes menu is applied.

The order in which these mappings are listed is important if a user can appear in more than one AD group. For example, you may assign All student Users to one profile but want to assign a different profile to the SixthForm group. As members of the SixthForm group will also be in the All student Users group the order is important: the first matching line (from the top down) is the one that is applied to a particular user. So, in this case, the SixthForm line must come above the All student Users one.

Ticking the Override box will allow users in this AD Group to change their profile - this should only be used for teaching or technical staff and not students! When ticked the logged in window or LoginApp will have a dropdown menu listing the other assigned filter profiles: selecting one will immediately change the user's active profile. This will allow staff to check whether sites they want to use in class are available on the student profiles and, if not, they can then ask the local Protex administrator to make the necessary list changes.

The up/down buttons can be used to re-order lines already entered and click the Delete button to remove a mapping.

NOTE1: the Set Timebands button will only appear when at least one timeband has been created. See Setup Timebands for instructions on how to set up and use timebands.

NOTE2: If a timeband is deleted in the Setup screen references to it are not removed from the mappings displayed on this screen. However, references to non-existent timebands are ignored.

Save changes

Can be clicked at any time to save the currently displayed settings.

Cancel changes

Will restore the screen to the most recently saved settings: i.e. any changes made since Save changes was last selected will be lost.

Configure domain options

Takes you to the page where the AD server settings are entered. Once configured this should only be required if there are changes to the AD server or domain admin user details.

Set timebands

Used to set up any time specific profiles for this group.