The Active Roles Console can be installed on any computer that meets the system requirements and has a reliable network connection to a computer running the Administration Service. It can also be installed on the computer running the Administration Service instance.
To install the Active Roles Console
-
Log in with a user account that has administrator rights on the computer.
-
Mount the Active Roles installation .iso file.
-
To start installation, double-click ActiveRoles.exe.
-
Accept the license agreement and click Next.
-
On the Component Selection page, clear all check boxes except Console (MMC Interface), then click Next.
-
On the Ready to Install page, review the summary and click Install.
-
To close the setup wizard, on the Completion page, click Finish.
Once you have installed the console, you can start it by selecting Active Roles 8.2.1 Console on the Apps page or the Windows Start menu, depending on the version of your operating system.
By default, after installing Active Roles, every user can log in to the Active Roles Console. You can allow or restrict access either for all users or to users you specify.
Allowing or restricting access to the Active Roles Console for all users
Use the MMC Interface Access setting of the Active Roles Configuration Center. This setting lets you restrict Console access only to Active Roles Admin users (or allow Console access again for all users, if the access is restricted).
To allow or restrict access to the Active Roles Console for all users
-
On the Configuration Center Dashboard page, in the MMC Interface Access area, click Manage Settings.
-
On the MMC Interface Access page that opens, in the Settings area, click Component, then click Modify or double-click the Component item.
-
On the MMC Interface Access wizard that appears, select one of the following options:
-
Allow Console (MMC Interface) access for all users: Enables the user to log in to Active Roles Console.
-
Restrict Console (MMC Interface) access for all users: Restricts all non-Active Roles Admin users from using the Console. This affects all delegated users, but does not apply to Active Roles Admin users.
-
Click OK.
Active Roles then configures the Console access settings successfully. When ready, a message appears prompting you to restart the Administration Service and disconnect all Console user sessions, so that the updated settings can be validated.
Allowing access to the Active Roles Console for selected users
If Console access is already restricted to Active Roles Admin users, you can give Console access to individual users by assigning them to the User Interface Management - MMC Full control Access Template (AT). This AT gives access permission to the Server Configuration > User Interfaces > MMC Interface object.
To allow access to Active Roles Console for selected users
-
In the Console tree, expand Active Roles > Configuration > Server Configuration.
-
Under Server Configuration, locate the User Interfaces container, right-click it, and click Delegate Control.
-
On the Users or Groups page, click Add, then select the users or groups to which you want to delegate the control. Click Next.
-
On the Access Templates page, expand the Active Directory > User Interfaces folder, and select the check box next to User Interface Management-MMC Full control.
-
Click Next and follow the instructions in the wizard, accepting the default settings.
-
After you complete these steps, the users and groups you selected in Step 3 are authorized to log in to the Active Roles Console.
-
Click OK to close the Active Roles Security dialog.
You can deploy the Active Roles Web Interface on any computer that meets the product system requirements and is running Internet Information Services (IIS) 7.5 or later.
NOTE: You do not need to deploy the Web Interface component on the same computer that runs the Active Roles Administration Service. However, the computer (or computers) hosting the Web Interface must have a reliable network connection to the computer (or computers) running the Administration Service component.
Prerequisites
For the prerequisites of deploying the Web Interface, see System requirements.
-
The Web Interface setup configures the Web Server (IIS) server role to meet the Web Interface requirements. You can use Server Manager to verify that the server role is configured properly.
-
Web Interface requires Internet Information Services to provide Read/Write delegation for the following features:
To confirm that these features have delegation set to Read/Write, in the Internet Information Services (IIS) Manager tool, use Feature Delegation.
When installing and initially configuring the Web Interface, you first use the Setup wizard to install the Web Interface files and then use Active Roles Configuration Center to choose the Administration Service and create the Web Interface sites.
To install the Web Interface
-
Log in with a user account that has administrator rights on the computer.
-
Mount the Active Roles installation .iso file.
-
To start installation, double-click ActiveRoles.exe.
-
On the Component Selection page, clear all check boxes except Web Interface, then click Next.
-
By default, all components are selected. If you only want to install the Active Roles Web Interface, clear the check boxes of the other components.
-
On the Ready to Install page, review the summary and click Install.
-
On the Completion page, make sure that I want to perform configuration is selected. Then, to launch the Configuration Center, click Finish.
The setup wizard only installs the files. After you have completed installation, you must configure the newly-installed Web Interface instance via the Active Roles Configuration Center that opens automatically if you select the I want to perform configuration check box on the Completion page in the setup wizard.
Alternatively, you can open the Configuration Centerby selecting Active Roles 8.2.1 Configuration Center on the Apps page or Start menu, depending on the version of your Windows operating system.
The procedure for configuring the Web Interface includes two stages:
