System information

Reference Guide Crestron 3-Series Control Systems
46 • 3-Series Control Systems Reference Guide – DOC. 7150A
Add Local or Active Directory User to a Local Group
Local users are created on 3-Series Control Systems without any access rights. By
adding them to a local group, they inherit the access level from the group. A 3-Series
Control System cannot create or remove a user from Active Directory but it can
grant access to an existing user in Active Directory. To grant access to an Active
Directory user, we can either add the user to a local group on the control system, or
add the Active Directory group(s) that they are a member of to the control system.
When authentication is turned on, users with administrator right can perform this
operation.
ADDUSERTOGROUP -N:username -G:groupname
-N: specifies name of a local or domain (domain\user) user
-G:[specifies name of a local group]
Remove Local or Active Directory User from a Local Group
When authentication is turned on, users with administrator rights can perform this
operation. After a user is removed from a local group, they are deprived the access
rights associated the group. The user account is not deleted by this command.
REMOVEUSERFROMGROUP -N:username -G:groupname
-N: specifies name of a local or domain user
-G: specifies name of a local group:
Add Active Directory Group
A 3-Series Control System cannot create or remove a group from Active Directory
but it can grant access to an existing group in Active Directory. When authentication
is on, users with administrator right can add an Active Directory group to the control
system and assign certain access level. Once the group is added, all members of the
group have access to the control system.
ADDDOMAINGROUP -N:groupname -L:accesslevel
-N: specifies the domain group name (domain\group)
-L: specifies one of the following access level:
A: - as an Administrator
P: - as a Programmer
O: - as an Operator
U: - as a User
C: - for Connection only
Delete Active Directory Group
When authentication is on, users with administrator right can remove a previously
added Active Directory group from the control system. The group is not deleted from
the Active Directory. Once the group is removed from the control system, all
members of that group lose access to the control system.
DELETEDOMAINGROUP domaingroupname
domaingroupname - name of the domain group (domain\groupname) to be
deleted.