How to Create a Group Policy

Overview

A Group Policy is a set of rules that are used by all members of an Organisational Unit (OU). Each rule may be Enabled, Disabled or Not Set. Example rules are “Allow Create Databases” and “Allow Manage Users”.

To keep things simple, we suggest using the same security settings for all Local Administrators. That is, Hong Kong Local Administrators should be able to do the same things in their databases as Singapore Local Administrators can do in theirs. 
There is the flexibility within IFP 3.1 to take a more individual approach to the security set-up if required. Please note the following:

• As Regional Administrators are members of the Administrators Role, they use a built-in Group Policy that allows them access to everything. As such, you do not need to create a separate Group Policy for them.
• Local Administrators need a Group Policy as you need to specify exactly which tasks they are allowed to perform. Refer to Local Administrator Group Policy Rule Settings for our recommendations.
• Normal Users do not require a Group Policy as they do not need to perform any administrative tasks. They use the built-in Default Group Policy.

How to Create a Group Policy for Local Administrators

You must have the Allow Manage Group Policies rule enabled to do this

1. From IFP Home, select Databases/Files > Database Manager.
2. Select Group Policies under Security in the left navigation. All existing users in that OU will be displayed in the right pane.
3. Click Add on the toolbar to show the Group Policy dialog.
    
4. Complete the required fields e.g. Name = Local Administrators Policy.
5. Select the Policy Rules tab. This lists all of the rules that can be set for the Group Policy and whether or not they are enabled.
6. Double-click a rule to view more details and to enable or disable it. Note that “not set” is the same as “disabled”.
7. Click OK to create the Group Policy.