TightGate-Pro

Dediziertes Remote-Controlled Browser System
zum Schutz vor Gefahren aus dem Internet

Automatisch generierter Auszug aus dem Administrationshandbuch

Datum: 11.04.2019

Herausgeber:

m-privacy GmbH

Technische Redaktion

Werner-Voß-Damm 62

12101 Berlin

Fon: +49 30 243423-34

support@m-privacy.de

www.help.m-privacy.de

Allgemeine Hinweise zu diesem Handbuch

Alle Materialien und Ausführungen wurden mit Sorgfalt erarbeitet und zusammengestellt. Den­noch sind Fehler nicht auszuschließen. Die m-privacy GmbH übernimmt keine Haftung für Schäden, die aus Unrichtigkeit einzelner Angaben entstehen.

Im Sinne einer raschen Orientierung und zur Vermeidung von Sicherheitsrisiken werden besonders wichtige Aspekte durch wiederkehrende Stichworte gekennzeichnet. Diese sind:

Hinweis
Unter diesem Stichwort werden nützliche Details zur rationellen Verwendung von TightGate-Pro er­läutert.

Achtung
Unter diesem Stichwort erfolgen Hinweise zur Problemvermeidung bzw. zur Vorbeugung von Betriebs­störungen bei TightGate-Pro.

Warnung
Unter diesem Stichwort erfolgen Hinweise auf mögliche Fehler bei der Konfiguration und Verwendung von TightGate-Pro, die weitreichende Sicherheitsrisiken bergen oder zu schwerwiegenden Betriebs­störungen führen können.

Inhaltsverzeichnis

Remove / delete user

User accounts and user directories can only be deleted directly on TightGate-Pro . When an account is deleted, the associated user directory is completely removed. Restoration is then only possible using an existing backup.

Before deleting users, a list of user accounts can be created for which the access or password has expired or whose quota has been exhausted.

To do this, select the menu item Export expiring. After entering a time period in days, all user accounts are determined,

whose access or password expires within this period or has already expired,

whose quota has been exhausted or

whose users have been inactive for a longer period of time.

The corresponding user IDs are stored in the file expired.txt file. This file is stored in the transfer directory of the administrator config transfer directory.

Deleting a user account

A user account is deleted in the following steps:

Procedure

Log in as administrator maint and select the menu item User management > Remove user accounts.

Select a filter filter to determine the user account to be deleted.

Mark the account(s) to be deleted with the space bar.

Confirm the selection. A confirmation promptappears in which all user IDs selected for deletion are listed again.

Confirm the selection with Yesto permanently delete the selected user IDs.

The system confirms the deletion process. Confirm it with OK.

In the next step, the system offers to delete all archives belonging to the user account (bookmarks, clear names, password, etc.) as well. If this is desired, the dialogue must be closed with Yes to confirm the dialogue. This completes the process.

If the archives are not deleted when the user account is deleted, they remain saved in the system. If a user with the same account name is created again later, the saved bookmarks are automatically restored from the archive.

Notes on deletion for user administration via Active Directory

The complete deletion of a user ID is only effective if the ID is also removed from the security groups TGProUser and TGtransfer in the Active Directory has been removed. Otherwise, the user is automatically created again as soon as the corresponding identifier logs on to the system again.

Notes on deletion for user administration via user certificates

When a user is deleted completely, all associated user certificates (SSL certificates) with which the user previously logged in are also revoked. It is then no longer possible to log in with these certificates - not even after a user restore from a backup.

Filter for user selection

TightGate-Pro provides various filters with which user IDs can be pre-sorted.

Filter
Show all users	Displays all user IDs in the system. Individual or all user IDs can be selected for deletion from this list.
Show users from csv	Filtering based on a stored CSV list, as described in the section Deleting users via a list.
Show inactive users	Filtering according to the last login date. All users who have not logged in within the selected time period are displayed.
Users never logged-in users	Displays all user IDs that have been created but have not yet been used to log in.
Show non AD users	Compares the existing IDs on TightGate-Pro with the users in the group TGProUser group in the connected directory service and displays all IDs that only exist on TightGate-Pro.

The selection of user IDs does not not yet lead to the deletion of users. Initially, only a list of users is created that corresponds to the selected filter criteria. Only after the desired user IDs have been selected and the security prompt has been confirmed the corresponding users are finally deleted.