As well as the Computer and User groups that are set up in Impero, there is also the option to give users access to 'Personal Groups'. This allows Console users to create their own group, independent of all other groups - with their own policies and filters that do not affect other users on the network. All settings applied to the group will be disabled once the Console is closed down. Access to Personal Groups are assigned to users via the Impero Server. This can be useful if you have 'Bring your own Device' (BYOD) initiatives in place.
There are three levels of access that a user can have; 'No Access to My Personal Group', 'Full Access to My Personal Group' and 'Full Access to EVERY My Personal Group'.
Personal Groups can also be populated using 'Registry Keys'.
No Access to 'My Personal Group'
Console users with this setting applied will not have access to create any Personal Groups. They only see the Computer and User groups that they have been given access to.
Full Access to 'My Personal Group'
If your user has this setting applied, you will have the ability to set up your own Personal Group. You will see an additional section for Personal Groups in the left-hand panel of the Impero Console.
In order to set up the Personal Group, right-click on 'My Personal Group' and hover over the 'Actions' menu item.
There are a number of options available from the 'Actions' menu:
If you make your Personal Group public, users across the network can join your group. Users can right-click the Impero logo in their system task tray, select 'Personal Groups' and then click 'Join Group'. They are provided with a list of Personal Groups that have been made public.
The 'Join Group' window contains a list of usernames of those Console users that have made their Personal Group public. The user can select a name, and click on 'Join' which adds them to that Console users Personal Group.
If you have made your Personal Group public, the option in the 'Actions' menu changes to 'Make Private'. Select this option if you no longer wish for users to be able to join your group.
Select 'Disable Group' if you no longer wish for your group to be active. When disabled, none of the policies applied to your group take effect. When your group is disabled, this menu item changes to 'Enable Group' which you can select in order to activate your policies again.
Broadcast for Group Members
Select this option if you wish to invite users to join your Personal Group. Clicking on 'Broadcast for Group Members' opens a new window on your screen containing a list of all the groups that currently exist in your Impero system.
Select from this list the group of users that you want to invite to join your group, and click on 'Ask Users to Join'. Users within the selected group will then see a message on their screen inviting them to join your Personal Group.
The user can then click on 'Accept' which joins them to your Personal Group, or 'Deny' to reject the request.
Load User List
You have the option to load a list of users into your Personal Group. In order to do so, you must have a text file containing a list of the usernames of the users that you wish to add to your group, with one username on each line. This text file must then be placed in a specific location that is defined within the Impero Server. In order to have this text file put in place, please contact your Network Administrator.
Once your list of users is in place, select the 'Load User List' option from the 'Action' menu item. This will then open a new window on your screen containing a list of all the text files that are in the folder that is specified in the Impero Server (Image 83.6).
Select the list of users that you want to put into your group, and click on 'Ok'. The users that are contained within the selected text file are then automatically joined to your Personal Group.
Remove All Group Members
Select this option if you wish to remove all of the users that currently belong to your Personal Group.
Select this option to delete your Personal Group. It will be automatically recreated when you restart your Impero Console.
Full Access to EVERY 'My Personal Group'
If your user has this setting applied, you can set up your own Personal Group, as well as see all other Personal Groups.
Under the 'Other Personal Groups' heading, you can see all the other users that have access to Personal Groups.
You can right-click on any other Personal Group that you can see and perform any of the actions that appear in the 'Actions' sub-menu.
There are three registry keys that can be configured to populate Personal Groups with:
These keys require to be configured as 'String Values' (REG_SZ).
NOTE: Please only use this method if you are comfortable editing system registry settings. If you are not comfortable with this, please check with your Network Administrator.
The use of these registry keys will override any of the previous methods of populating your Personal Group. For example, if you have one of these entries in place, and then broadcast for users to join your Personal Group, any users that attempt to join your Personal Group will not appear in your group unless they are part of the registry key setting that you have in place.
Impero verifies for these registry keys in the order shown above, and only uses the first registry key that is populated. Therefore, if you populate the 'Impero_PopulateMyPersonalGroupWithComputersLike' key, the other two are ignored even if they have an entry.
This registry key will instruct Impero to look through every computer that has the Impero Client installed on it and is connected to your Impero network, and then add the computers that match the value that you have set. Those computers that match your value will then be added to your Personal Group. You can use an asterisk (*) as a wildcard.
For example, if the following computers have the Impero Client installed to them, and are connected to your Impero network:
And you set the 'Impero_PopulateMyPersonalGroupWithComputersLike' registry key to 'ICT-ROOM1*', the following computers will be added to your Personal Group:
But the computers beginning with 'ICT-ROOM2' will not be added to the Personal Group.
This registry key instructs Impero to add the computer(s) you specify into your Personal Group. You can add multiple computers separated by a comma, and the use of asterisks as a wildcard are also supported in this method.
For example, the following computers have the Impero Client installed to them, and are connected to your Impero network:
And you set the 'Impero_PopulateMyPersonalGroupWithComputers' registry key to 'ICT-ROOM1-01,ICT-ROOM1-02', the following computers will be added to your Personal Group:
But all the other computers are not added.
This registry key instructs Impero to add the users or Active Directory groups that you specify into your Personal Group. You can add multiple users/Active Directory groups separated with a comma. All entries are assumed to be usernames; if you wish to specify an Active Directory group, the entry requires to be contained by [square brackets].
For example, if you set the 'Impero_PopulateMyPersonalGroupWithUsers' registry key to 'Steve,Jessica,[Admins]', the following users will be added to your Personal Group:
All members of the 'Admins' Active Directory group.
NOTE: If using the comma separated method of setting your registry key, please ensure there are no spaces in between entries.