144 Security Management553-3001-230 Standard 10.01 September 2007User management recommendationsThe Administrator user account for the Windows OS does not appear in the TM 3.0Users window. This is to prevent users from changing the Administrator accountpassword from within TM 3.0.Even though it is not listed in the Users window, the OS Administrator account canalways be used to log in to TM 3.0.Nortel strongly recommends that a new user group be created in TM 3.0 based on theAdministrators user group. TM 3.0 users should be assigned to this new user groupinstead of adding them to the Administrators user group. This is a security measure toensure that a user with administrative access to TM 3.0 does not also have access to theOS on the TM 3.0 server as a member of the Administrators group.InstallationFresh installationIn a fresh installation, three new user groups are created in Windows. TM 3.0 utilizesHelpDesk, EndUser, and Default user groups along with the existing Administratorsgroup.For TM 3.0 Windows clients, the TM 3.0 server’s host name must be provided duringinstallation. The host name is saved in the registry.UpgradeIn an upgrade, existing TM 3.0 Windows Templates are created as user groups. Bydefault, these groups do not have access to TM 3.0 Web Navigator applications.A local server account is created for each existing TM 3.0 Windows user. The newaccount is assigned to the appropriate user group.Existing TM 3.0 Telephone Access Profiles, which were based on user groups, aremigrated from the Web Navigator database to the new user group database. Thisassumes that the corresponding groups related to them already exist.These user groups are also migrated to the Web Station database; however, new usergroups do not have access to Web Station administration. Access to Web StationAdministration must be configured by using the User Groups Web page. See “Usergroups” on page 116.
