You are here: MONITOR Basics > Configuration and Maintenance > Security > Windows Network

Windows Network

When you configure the access rights to MONITOR on the server it is:

Access right/permission is configured by using the Explorer in Windows. First select Properties for a directory, file or network resource.

In order to configure access rights for a directory or a file you should then select the Security tab. After this you can give new groups and users access rights to the directory by using the Add button.

In order to configure access rights for a network resource you should then select the Share tab and then the Permission button. After this you can give new groups and users, access rights to the shared folders by using the Add button.

Access Rights to MONITOR Directories on a Windows Server

The tables below describe the minimum access rights that the various groups and user accounts in the domain must have to the directories, certain files and the network resource on the server in order for the system to work. The left column shows the directory, file or network resource. The middle column displays the Windows permission that should be configured for the respective directory. The right column shows the type of MONITOR user or Windows-group that the permissions apply to.

Directory

Permission/Access Right

Function/Group

Monwin

Full access

Read and run

Administrators

All users

BIPlugins

Full access

Read and run

Administrators

All users

bi_data

Full access

Administrators

Client (incl. sub-directories)

Full access

Read and run

Administrators

All users

Crystal\Standard

Full access

Read and run

Administrators

All users

Crystal\Custom

Full access

Modify

Administrators

Form adaptation group *

Db (incl. sub-directories)

Full access

Administrators

Dbbackup (incl. sub-directories)

Full access

Administrators

EDI (incl. sub-directories)

Full access

Modify

Administrators

MEDI users **

ExtFiles

Full access

Modify

Administrators

All users

Fonts

Full access

Read

Administrators

All users

Html ***

INI (incl. sub-directories)

Full access

Modify

Administrators

All users

Inne ***

Licenses

Full access

Read

Administrators

All users

Log

Full access

Modify

Administrators

All users

SQL

Full access

Administrators

Stampsrv ***

Tools

Full access

Read

Administrators

All users

TRTPlugins

Full access

Read and run

Administrators

All users

* The user/users that will make changes in forms in Crystal Reports.
** The user/users that will import/export EDI messages using the program MEDI in MONITOR must have permission to Change files in the EDI directory.
*** The directories Html, Inne and Stampsrv including sub-directories, if any, are no longer used.

Permission/Access Rights to Form Files on a Windows Server.

It is possible to assign access rights to change the form files in the Monwin-directory for certain users. This way the administrator (who has full access rights in the Monwin-directory) does not need to be available when settings should be changed on the forms.

File

Permission/Access Right

Function

Monwin\MblankeX.pbl *

Monwin\MblankeY.pbd *

Modify

Modify

Forms in MONITOR

Forms in MONITOR

* where X is the number for the set of forms and Y is always number 1-9. That is, Mblanke1.pbl for set of forms 1 and Mblanke2.pbl for set of forms 2, etc. There are 9 files Mblanke1.pbd-Mblanke9.pbd.

Permission to Network Resource on a Windows Server

When sharing a directory as a resource, the standard access right is full access to the resource for the All group in the domain, which might be a bit too generous. Therefore, you should here add the group in the domain which includes all the user accounts that will use MONITOR. This group should have the access type Modify. You should also add the group Domain Administrator with Full Control. Then remove the All group from the resource.

Network Resource

Permission/Access Right

Function/Group

Monwin

Full access

Modify

Administrators

All users