Problem description:

Here is description how to enable users without full administrative rights (member of Account Operators group for example) to administer "FaxChange" tab in MMC - Active Directory Users and Computers snap-in.

Solution:

You need to go through these steps:

1. Register fxmmc.dll library
   You can use UMS Remote Installer tool (\support\UMSRmtInst folder of installation CD) and use it for UMSAdmin.exe package installation.
   If you do not want to use this tool, copy fxmmc.dll from Faxchange server (from \FaxChange\BIN) to client PC and register it using C:\Program Files\Datasys\regsvr32 fxmmc.dll. You must have sufficient rights for this operation.

2. Set rights in Active Directory for work with Faxchange tab
   In MMC Active Directory users and Computers click to domain name, show Properties and on the Security tab (Advanced Features must be switched on) click to Advanced, go to Permissions tab, click to Edit. Inside Permission Entry for "domain-name" window select Properties tab. In Name: field select group - for example Account Operators - and in Apply onto: field select User objects. Select all items beginning with "Read DsFx" and "Write DSFx" (total count = 14) in list of rights and set all of them to Allow.

3. Enable remote registry access to server registry
   Set access rights to Faxchange share on the Faxchange server to user, which will be allowed to administer Faxchange.
   Run REGEDT32 and set access rights to this user for registry key HKEY_LOCAL_MACHINE/Software/Datasys include subkeys.
   Also set right to this user for registry key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg

Further information:

More about enabling remote registry access you can find in KBFX19981012A record and in Microsoft KB record Q153183.

Keywords:

remote administration, AD, Faxchange, tab

If there is something unclear, send us an email to development@datasys.cz.