Use this task to add the user account to additional and excluded lists for dynamic groups.
To add a user account to a dynamic group's additional list
-
In the Manager, select the HCL Domino > User accounts category.
-
Select the user account in the result list.
-
Select the Maintain excluded and additional task.
-
Select the Additional tab.
-
In the Add assignments pane, assign groups with an additional list that will contain the user account as a member.
TIP: In the Remove assignments pane, you can remove the assignment of groups.
To remove an assignment
- Save the changes.
To add a user account to a dynamic group's excluded list
-
In the Manager, select the HCL Domino > User accounts category.
-
Select the user account in the result list.
-
Select the Maintain excluded and additional task.
-
Select the Excluded tab.
-
In the Add assignments pane, assign groups with an excluded list that will contain the user account as a member.
TIP: In the Remove assignments pane, you can remove the assignment of groups.
To remove an assignment
- Save the changes.
Related topics
Use this task to obtain an overview of the most important information about a user account.
To obtain an overview of a user account
-
In the Manager, select the HCL Domino > User accounts category.
-
Select the user account in the result list.
-
Select Notes user account overview category.
If a user has forgotten the password to a user account and lost the user ID file, the user ID file can be restored. Since Domino version 8.5, Domino provides the ID vault function to do this.
One Identity Manager uses ID restore to provide its own method for restoring the user ID files. This can be used if an older version of Domino is in use or if ID Vault should not be used.
NOTE: The method to be used for restoring user ID files is specified by the domain. This option is valid for all user accounts in the domain.
Detailed information about this topic
The ID vault is a Domino database that stores copies of user ID files. This allows Domino to be able to restore user ID files and to reset user account passwords. One Identity Manager provides a process for resetting the passwords in the ID vault.
Prerequisites
-
The Domino server that communicates with the gateway server, is also the ID vault server.
-
There are running permissions defined for agents for the synchronization user account. For more information, see Running restricted LotusScript/Java agents.
-
ID vault database permissions for the synchronization user account are set to: Manager access function and Auditor role. For more detailed information, see your Domino documentation.
-
Permissions for restoring passwords of the synchronization administrative user account and the ID vault server are set. For more detailed information, see your Domino documentation.
To use the ID vault
-
In the Manager, select the HCL Domino > Domains category.
-
Select the domain you want to use for the ID vault in the result list and run the Change main data task.
-
Set the ID vault enabled option.
This setting effects all user accounts in the domain.
- Save the changes.
NOTE: If certain user accounts are excluded from the ID vault by the ID vault policy in Domino, the password cannot be reset by One Identity Manager.
In order to ensure the passwords for all user accounts in a domain can be reset, assign a policy for ID Vault that cover the whole organization.
When a new user account is published in Domino, One Identity Manager saves the initial password in the One Identity Manager database (NDOUser.PasswordInitial). This initial password is used when a user account password needs to be reset. Passwords are saved automatically for user accounts that are initially setup in One Identity Manager. The initial password for all other user accounts has to be transferred to the One Identity Manager database by a customized process.
To reset a user account password
-
In the Manager, select the HCL Domino > User accounts category.
-
Select the user account in the result list.
-
Select the ID restore task.
This task starts the NDO_NDOUser_PWReset_from_Vault process. This process replaces the password from the user ID file saved in the ID Vault with the initial password from the One Identity Manager database. If the user is logged into the Notes client at this point, the user‘s local ID file is replaced with the update copy from the ID Vault. The user has to login with the initial password when the Notes client is started the next time. If the user is not logged into the Notes client when the password is reset, the updated ID file must be provided separately.
Once the password has been successfully reset, the user must be provided with initial password and the ID file if necessary. This process has to be customized to meet your needs.
.