CONFIGURING
About this task
You create and manage administrative account documents in the Domino Directory (names.nsf). Then you can use a Domino policy to assign accounts to client users' Contacts application. Administrative account settings are preset for, and by default are not editable by, client users, but if necessary, you can enable some settings as editable. For some applications, Sametime and custom or third-party features and plug-ins, you can attach a custom desktop icon.
Tip: You can also assign administrative accounts settings using a deploy.nsf or customizing a plugin_customization.ini file during install or upgrade. For example, an alternate method is required for a Connections server using Domino single sign-on. For details on these alternatives, see the related information topics.
Parent topic: Specifying Dial-Up, Account, and Name Server settings for a desktop policy
Creating administrative accounts using the Domino Directory
Use the Accounts view in the Domino server's Domino Directory to create, edit, delete, or view an administrative account.
Procedure
1. From the Domino Administrator client, open the Domino Directory on the server.
2. Select People -> Policies -> Accounts.
3. Click Add Account.
This account name is visible to Notes users (File -> Preferences -> Accounts) but is not editable. A column in the user's Accounts preferences page displays a lock icon for administrative accounts.
Options include Sametime, Connections, and Other. You can also specify a new key word such as MyCustomAppAcct1. If you select Connections or Sametime, additional options appear.
Other can be any protocol that the plug-in uses; for example, VP protocol.
Predefined authentication types for HTTP protocol include the following; you can also add custom authentication types:
If the account is a Sametime or Connections account type, there are multiple Account Type-specific settings available on the form .
Note: For a Connections account, always select this option. You can configure only one primary Connections account for a single client user.
Assigning administrative accounts using a Domino policy
You can assign administrative accounts created or edited in the Domino Directory to clients using the Administrative Account Defaults section on the Accounts tab of the Domino desktop policy settings document. Options are as follows:
Use this option to overwrite the same name account in the user's Contacts application (local names.nsf). Or, disable to keep the existing account but rename the managed account to a unique name -- and continue to assign the administrative account settings to the user.
Restriction: This option should not be used with the client's Switch ID feature. When multiple users of the same client are assigned to the same policy, one user could overwrite another user's account settings.
Use this option to assign all or selected administrative account settings to target users.
Note: No changes are assigned if the only update to the desktop setting document is to select this option. The administrator must update one of the listed accounts or click the Update Links button in order for the updated desktop setting to take effect.
You can add any trusted sites you want to use for administrative accounts.
For Tivoli Access Manager (TAM) or SiteMinder accounts, a trusted site specification is required. By default, the login form on the authentication server for an TAM or SiteMinder administrative account must be accessed using SSL and the server must be contained in a list of trusted sites. Click New to add or Edit to modify a specified trusted site for any such account specified.
Related tasks Creating a Desktop Settings document
Related information Using INI settings to configure the IBM Connections features that are available in the IBM Lotus Notes client Tech Note #1424483: Administrative accounts for management of client plug-ins