Q100111: [Installation] Setting up permission groups for JobServer.NET

JobServer.NET defaults to only allowing access to the service by accounts that have administrator rights to the local machine when running on a machine that is not part of a domain, or in the Active Directory when running on a machine that is a domain member.

There is a method for granting access to JobServer.NET for accounts that you do not want to add to the administrator group. In this article, when we refer to group membership, it will be based on weather the machine is not a domain member, where we will be referring to groups defined locally on the machine. Or it will be based on machines that are members of Active Directory, and in these cases, the group we are referring to will be the groups in the same Active Directory branch. For local machines, this is managed in the Computer Management application, which is usually found under the Windows Administrative Tools folder in the Start Menu. In Computer Management, expand out the System Tools node in the left side navigation panel, then Local Users and Groups to find the options for local machines. For machines that are domain members, this is done using the Active Directory Users and Groups application.

To grant permission for one or more accounts to have access to JobServer.NET, first create a group with the name JobServer_Edit. Note that the case and spelling of the group name is important. Once this group is created, you can add any user accounts that you want to grant access to JobServer.NET. Once the user account is added to this group, it will be able to login to the JobServer.NET Management Application and create, edit, and run jobs. The user account does not need to have membership in the administrators group once membership is granted to the JobServer_Edit group.