Environment
GroupWise Forensics 18 (Reveal)
Situation
How do you setup user rights to specific domains, post offices or other users with Reveal?
Resolution
Setting up rights is a great tool for Reveal to restrict access for users to specific domains, post offices, or other mailboxes to view. First you must have GroupWise Forensics installed on your system and have made the initial connection to the GroupWise system. To setup rights follow these steps:
1) Locate the userrightssample.ini file. This file is located in the GroupWise Forensics application directory (C:\Program Files(x86)\GroupWise Forensics18
2) Rename this file or make a copy of it, but make sure it remains in the application directory. Rename the file to userrights.ini
3) Edit the file. The userrights.ini will contain information on how to setup rights within Retain. It gives examples on how to setup the rights. Leave all of the information as is in the file. At the bottom of the file add in the new criteria.
The following will go through the process on how to setup a user and restrict that user to the different areas of GroupWise.
a) To add in new rights access for users within GroupWise Forensics is a simple process. First you specify the user you are giving access. Make sure to put the user in square brackets. For example: [USER1]
b) The next step is to specify which level of access you wish to give the user: domain, post office, or individual mailboxes. The restrictions are hierarchical, meaning if restricted on the highest level (Domain) the user will not be able to see anything that filters down below.
i) For Domain add in the domain name then =1 to allow access. For example:
[USER1]
DOMAIN1=0
*DOMAIN2=1
This allows USER1 to not have access to DOMAIN0 but will have access to DOMAIN2.
*Note: It is not necessary to specify DOMAIN2=1, as anything not listed for the user will have
access to it unless set =0.
The user will be able to view all mailboxes, and all post offices under DOMAIN2, but not for
DOMAIN1.
ii) For the post offices it is exactly the same pattern as the domain.
[USER1]
PO1=0
PO2=1
This allows USER1 to not have access to PO1, but will have access to PO2.
*Note: It is not necessary to specify PO2=1, as anything not listed for the user will
have access to it unless set =0.
The user will not be able to view all mailboxes under PO1, but will be able to view all
mailboxes under PO2
iii) For the mailboxes it is exactly the same pattern as the domain and post offices.
[USER1]
USER2=0
USER3=1
This allows USER1 to not have access to USER2, but will have access to USER3.
*Note: It is not necessary to specify USER3=1, as anything not listed for the user will
have access to it unless set =0.
The user will not be able to view the user and messages for USER2, but will be able to view
the user and message for USER3
Note: Future revisions of Reveal will have a new application for assigning rights to users.
Additional Information
This article was originally published in the GWAVA knowledgebase as article ID 1317.