Overview

Kerio Control user account managing allows user authentication with the username/password and optionally with 2-step verification and automatic user login; gathering reporting data in Statistics; setting access rights, quotas, and languages. It is also possible to add users to groups, block specific web object elements, and monitor active hosts.

User accounts are managed in the Users section of the administration interface. You can add either new local accounts or existing accounts from a directory service.

Prerequisites

Access to Kerio Control Administration

Diagnosis

You need local accounts in the following cases:

• Microsoft Active Directory or Apple Open Directory is not used in your environment.
• You want to add local administration accounts. 

Solution

Create a local account

1. In the administration interface, go to the Users section.
2. Click Add.
3. In the Add User dialog box, type the username and password (other items are optional). Usernames are not case-sensitive.
   
4. (Optional) Add the user to the necessary group.
   
5. (Optional) Define IP or MAC addresses for automatic login and the VPN client.
   
6. Click OK.

Adding a local administration account

The advantage of local administrator accounts is that such users can authenticate locally even if the network communication fails.

1. In the administration interface, go to the Users section.
2. Click Add.
3. In the Add User dialog box, type the username and password and confirm password. Usernames are not case-sensitive.
4. In the Authentication drop-down list, select Internal user database.
5. In the Domain template part, select This user has a separate configuration.
   

Now, you can edit the Rights, Quota and Preferences tabs independently of other users.

1. Go to the Rights tab.
2. Select Full access to administration.
3. (Optional) Select also additional rights Users can unlock HTTP content rule, Users can control dial-up lines, and Users can connect using VPN.
   
4. (Optional) Define user traffic quota limits.
   
5. (Optional) Define user Web content Filtering restrictions and Preferred language.
   
6. Click OK.

From now on, the local administrator account works and the user can access Kerio Control Administration with it.

Adding accounts from a directory service

For more information refer to Connecting Kerio Control to directory services.

Using templates

Each domain in Kerio Control includes a template. If you are planning to create numerous accounts with similar settings, or change one item for all users in the domain, use the template for it:

1. In the administration interface, go to the Users section.
2. Click Template.
3. In the template, specify all the settings which are common for all users from this domain, such as VPN connection rights.
   
4. Specify Quota limits, web content Filtering, and language preferences.
   
5. Save the settings.
6. In the Users section, click Add/Edit a user.
7. In the Add/Edit user dialog, select This user's configuration is defined by the domain template.
   

Deleting user accounts

User accounts can be suspended temporarily or deleted permanently.

You cannot disable/delete the following users:

• You, if you are logged in Kerio Control Administration.
• Automatically generated Admin user

Disabling users temporarily

When you disable user accounts temporarily, users cannot log in to Kerio Control.

1. In the administration interface, go to Users.
2. Double-click the user, and on the General tab, clear the Account is enabled option.
   
3. Save your settings.

Deleting users permanently

1. In the administration interface, go to Users.
2. Select the user, and click Remove.
   
3. Alternatively, right-click on the user -> select Remove.
4. In the Confirm Action dialog, click Yes.
   

Kerio Control deletes the user.