Adding Server Administrators

The main EFT Server administrator account is created when you install EFT Server. That account can log in and create other administrators with varying permissions. (Refer to Delegated Administration for details of the varying permissions.) You can give other users and groups access to the administrative functions of EFT Server by creating an administration account for them in the EFT Server administration interface. For security and for compliance with the PCI DSS, you should not create more than one administrator with full control over EFT Server. (You cannot edit the settings for your own account.)

To create an administrator account

1. In the administration interface, connect to EFT Server and click the Server tab.

2. In the left pane, click the Server node to which you want to add an administrator account.

3. In the right pane, click the Administration tab.

4. In the Administrator Access and Permissions area, click Add. The Create/Edit Administrator Account dialog box appears.

5. Specify either Windows Authentication or EFT Server Authentication. (Windows Authentication is available in EFT Server Enterprise.)

   • If you choose EFT Server Authentication, specify the account details:

   • 1. Define a user name for the account.

     2. Define and confirm a password for the account or click Generate to generate a strong password.

        Passwords are case-sensitive; the username and password fields each cannot exceed 1024 characters. If the Password and Confirm boxes do not match, the OK button is disabled. Retype the passwords.

   • If you choose Windows Authentication, click Browse to specify the User or group. The Select User or Group dialog box appears.

   • 1. To expand the dialog box, click Advanced.

     2. To specify the type of object to search for (User or Group), click Object Types. The Object Types dialog box appears.

     3. By default, both groups and users are searched. To search only groups, clear the Users check box; to search only users, clear the Group check box, then click OK.

     4. Click Locations to specify a network address to search. The Locations dialog box appears with available locations displayed. Click a location, then click OK.

     5. In the Select User or Group dialog box, use the Common Queries area to search for a specific user or group.

     6. After you have specified your search criteria, click Find Now. The search results appear.

     7. Click the user or group that you want to use for this account, then click OK. The user or group appears in the Create Administrator Account dialog box.

     8. Click OK.

     AD accounts that are part of the local computer’s Administrator’s group will not appear when browsing the “local computer” because these accounts are AD accounts, not local. AD accounts will appear when browsing the "AD" scope. You can select AD accounts when performing remote administration as long as the administration interface and EFT Server are in the same domain or working across trusted domains.

     The new user appears in the Admin account names box.

6. Click the Selected account permissions policy box, then specify the functions this account can control. (Refer to Delegated Administration for details of each type.)

7. If you specified that the account is a Site Admin, Template Settings Admin, Change Password Admin, or User Admin, the assignment dialog box appears.

8. Specify one or more items in the Available box, then double-click the selection or click Add, then click OK. The assignment appears in the Assigned to list.

   Password Policy and Account Policy options apply to all EFT Server-managed administrator accounts defined on this Server. The Selected account permissions policy and Optional permissions apply only to the account selected.

9. Click Apply to save the changes on the Server.

Related Topics

Changing an Administrator Password or Access Rights

Enabling Complex Passwords for Administrator Accounts

Enforcing Password History for Administrators

Enforcing Password Reset for Administrator Accounts

Expiring Administrator Passwords

Locking Out or Unlocking an Administrator Account

Deleting Inactive Administrator Accounts