eControl: ZERO Rights, Browser-based Identity Management for Help Desk Personnel - GroupWise, eDirectory, Active Directory, Exchange and Mixed Networks - EMU Bulk-User Management Aldo Zanoni Master CNI, B.A., B.Ed. Director of Customer Service, Omni Technology Solutions Inc. Aldo@omni-ts.com

Session Overview eControl Presentation (10 minutes) New Features in Version 2.x - Manage Mixed Networks: eDirectory, Active Directory, GroupWise, Exchange 2 Demonstration of User and Administration Interfaces on a Live System (20 Minutes) 3 4 EMU Presentation (5 Minutes) 5 Demonstration of Export, Import, Bulk Modify, Advanced Functions – Auto-Create (5 Minutes) 6 Questions and Answers (10 minutes)

Part 1a: Help Desk User Management (HD) Use HD to provide a controlled interface for your Help Desk Operators Distribute standard Tier One Help Desk Operations to a larger number of non-technical people without worrying about them accidentally creating "distress" in your life by using NWAdmin and ConsoleOne®. Train your Tier One HDOs on how to use HDU in under 15 minutes! Increase user and administrator satisfaction

Help Desk User Management (HDU) Provides a Win32, ‘RIGHTS REQUIRED” utility that allows you to control what options appear in the user administration screen. Provides a restricted, intuitive interface for Help Desk Operators (HDOs). Allow local administrators to: enable/disable accounts, change NDS and GroupWise passwords, change NetMail 3.x values, Group Membership, GroupWise Distribution Lists and and much more from a simplified interface

Part 1b: eControl – HD, USS, CL, AC Web-based interface for FOUR modules Help Desk User Management User Self-Service Account Create/Manager Contact List N NetMail l 1 Browser Proxy Service 2 3 4 NDS/eDir AD, Exchange, Notes, OpenLDAP Version 2.0 Through LDAP and eDir APIs GroupWise Through Win32 APIs Through LDAP

eControl “ZERO Rights” Modules 1. Help Desk User Management (HD) - Provides Help Desk Operators with the ability to carry out the “TOP TEN” user administration tasks - in a WEB browser – NO NDS/eDirectory rights required! 2. User Self-Service/Self-Administration (USS) – Allows you to set which user eDirectory fields can be updated/modified by a user in the Web Interface. 3. Account Create/Manager (AC) – Allows HDOs to create users based on eControl profiles and eDirectory templates. Allows users to sign up and auto-create an account from a WEB form. 4. Contact Lookup (CL)- Allows users to retrieve configured information from eDirectory (phone numbers, etc.)

eControl HD “Top Ten Tasks” Disable/Enable eDirectory Account Disable/Enable NetMail – Expire GroupWise Reset Password Group Memberships Organizational Roles GroupWise Distribution Lists GroupWise Options Password Restrictions Login Restrictions Login Script Intruder Lockout Identification

eControl Account Create/Manager Tasks Automatically create account based on eDirectory template (home directory, group membership, container, etc.) and eControl Account Create Wizard Profile (naming convention and all other components not covered in eDirectory template) Customisable user required fields (first name, last name, middle initial, phone number, mobile number, etc.) Creates user name with specified naming convention and requires unique name in eDirectory and GroupWise system(s) (USS-AC) Allows Web-form account creation based on registration system information (version 2.0)

eControl User Self-Service/Self- Administration Tasks Subscribe/Unsubscribe from GroupWise Distribution Lists Select Challenge-Response Phrases and provide answers for Web-based password change Edit eDirectory fields (including extended Schema values) that have been enabled by the Administrator (mobile number, pager, etc.) Version 2.x will provide support for Secure Forms Processing (Vacation Request, etc.)

eControl Hardware/Software Requirements Windows 2000 or 2003 IIS 5 or 6 A Security Certificate for SSL (optional) Microsoft Message Queuing (MSMQ) Novell Netware Client 4.9 (minimum) Novell GroupWise 5.x or 6.x MSDE or eDirectory Extension to provide “Forgot My Password” Self-Service

eControl Hardware/Software Requirements Novell NetWare, OES, SUSE Linux, Windows LDAP version 3 needs to running on your server (NLDAP) NDS Version 8.5 or any version of eDirectory Local copies of Replicas to be accessed (recommended)

Part 2: Version 2.x - Manage Mixed and Multiple Networks from a single browser Novell eDirectory Novell GroupWise Novell NetMail Microsoft Active Directory Microsoft NT Domains Microsoft Exchange Lotus Notes (version 3.0) Open LDAP SQL/MySQL, etc. Custom applications eControl

PART 3: eControl Demonstration www.omni-ts.com Introduction and welcome.

Part 4: Use EMU to… Improve your Return on Investment in large Novell® networks. Better manage large Netware, NDS/eDirectory®, NetMail® and/or GroupWise® Networks. Create, manage, import or modify tens, hundreds and thousands of accounts. Manage more accounts with fewer resources, in less time, with less stress. Update tens, hundreds or thousands of telephone numbers (or other standard or extended schema values) with a few clicks of a mouse. Select/modify/delete accounts based on last login time, number of days since last login time, never logged in, not used in X days, etc.

EMU Features Move user home directories to other volumes - keep Trustee Assignments, File Ownership and Disk Restriction information Check for duplicate user names in specific containers (or the entire tree) before creating user IDs Enhanced ability to modify users based on the contents of a text file Bulk modify user properties based on Group Membership Add and delete Group Membership at the same time Bulk modify GroupWise visibility Bulk modify GroupWise and NDS passwords Create GroupWise users for existing NDS users

EMU Features (continued) Ability to save all create information to an EMU profile - a powerful improvement on the concept of user templates Allows you to re-use field links for multiple import sessions Use EMU Auto-Create and Auto-Delete functions to automate user creation/deletion

PART 5: EMU Demonstration www.omni-ts.com Introduction and welcome.

Part 6: Questions and Answers ? Visit our booth and pick up your spiffs (a different spiff each day). Be at our booth at the end of each day to be eligible to win software. Aldo@omni-ts.com

Unpublished Work of Novell, Inc. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary, and trade secret information of Novell, Inc. Access to this work is restricted to Novell employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of Novell, Inc. Any use or exploitation of this work without authorization could subject the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. Novell, Inc., makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All Novell marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners. This means that no work is lost with either the Novell Nsure UDDI corporate or testing solution. Enterprises that build their UDDI solutions with Novell Nsure UDDI Server, are not only leveraging the deep experience Novell Identity Management foundation brings to the standard, they are securing their own future by building on an open standard implementation that will grow and scale with their corporate needs.