Re: Understanding MMC and AzMan
From: Pent (pent)
Date: 11/06/03
- Next message: Joe Kaplan \(MVP - ADSI\): "Re: Recipients info for Enveloped Message"
- Previous message: Michel Gallant: "Recipients info for Enveloped Message"
- In reply to: Chris Pettingill: "Understanding MMC and AzMan"
- Next in thread: Chris Pettingill: "Re: Understanding MMC and AzMan"
- Reply: Chris Pettingill: "Re: Understanding MMC and AzMan"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 6 Nov 2003 17:49:49 -0500
You have to build your own MMC snapin for this. As to why such a snapin
doesn't exist, it's very specific to your app needs. i don't think someone
can write a snapin that will do everything you or anyone else wants for
their specific application.
You can find all MMC Snap-ins: Start | Run | mmc
Console | Add/Remove Snap-in | Add
You'll see all snapins registered on the system and you can see what each
one does.
"Chris Pettingill" <nospam@nospam.com> wrote in message
news:%23oI0GBLpDHA.3024@tk2msftngp13.phx.gbl...
> When I first saw SQL Server's Enterprise Manager, I thought this would be
a
> great way to secure my own application (I mean having a tool like this).
I
> see now that Enterprise Manager is just an MMC snap-in (or at least I
think
> it is). I also recently read the "Use Role-based Security in Your Middle
> Tier .NET Apps with Authorization Manager", in the Nov 2003 MSDN mag
issue.
>
> Now when I first looked at the group policy editor (and some other)
snap-ins
> on my WinXP machine, I had figured I could use one of these to do what
AzMan
> seems to allow. AzMan looks great except for that it's quite limited on
XP
> and Win2k.
>
> I don't think I need all the scripting flexibility of AzMan, so is there
> some other snap-in available that will allow me to do something similar?
> Basically here's what I'd like:
>
> - Define key application functions
> - Allow an admin to assign users/groups to each function
> - I want to be able to control client app UI functionality, not just
> middle-tier stuff
> - Have my app check the configuration above to determine if a given user
can
> perform a certain task
> - This should work in on Win2k/XP/2003
> - Admins with Active Directory should be able to use that to remotely
> administer policies for users/machines, but alternatively this should also
> work for users with machines that are not part of an Active Directory
domain
> - Obviously only those with the requisite authority should be able to
> change the above settings
> - Should work with .NET
>
>
> I am just getting my head around how MMC works. I always thought that the
> sort of stuff I'm talking about above was configurable using MMC only, or
at
> least a standard snap-in. But now it seems that if I really want the
above,
> I'm going to have to build my own snap-in. Am I missing something? Why
has
> such a snap-in not been built before? Is there some sort of performance
or
> security or issue with using an MMC snap-in of some sort to configure my
> application's security and functionality?
>
> (I'm in the very early brainstorming stages of building a major new
version
> of our application, and I'm trying to understand all the current
> technologies and the best way to apply them to my application design).
>
> Thanks,
> Chris
>
>
- Next message: Joe Kaplan \(MVP - ADSI\): "Re: Recipients info for Enveloped Message"
- Previous message: Michel Gallant: "Recipients info for Enveloped Message"
- In reply to: Chris Pettingill: "Understanding MMC and AzMan"
- Next in thread: Chris Pettingill: "Re: Understanding MMC and AzMan"
- Reply: Chris Pettingill: "Re: Understanding MMC and AzMan"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
