11.5

Dragon Administrator Guide version 11.5
Controlling user access to other user's
profiles
If you have multiple Dragon users on an end-user workstation, those users will have multiple User
Profiles to choose from in Dragon's Open User Profile dialog box.
If you use a shared directory for User Profiles, whether they are roaming or non-roaming, you may
be concerned about the ability of a user to see and/or open another user’s file as well as their abil-
ity to open the correct file. There are several ways to address this concern:
n Many of Nuance’s customers address this concern simply through user training. Each user
should be aware that if they open another user’s file and try to use it, their accuracy will be poor
and user-specific customizations will not be available. Therefore, each user has an incentive to
use only their own file. However, this fact doesn't prevent a malicious user from damaging
another user’s file.
n If users always log into Windows with a unique Windows user ID, you can use Windows file
permissions to control access to the files. Typically, you do this by granting Full Control or
Read/Write/Modify access to the shared directory, but do not allow this permission to
propagate to sub-directories. That way, each user becomes the creator owner of any Dragon
User Profile that he or she creates. Users can still see all of the Dragon User Profiles in the
Open User Profile dialog box, but if they try to select another user’s profile a message will
appear saying that they do not have permission to access that profile. Apply similar file
permissions to the local copy of each Roaming User Profile; the default location for local copies
is under
C:\Documents and Settings\All
Users\ApplicationData\Nuance\NaturallySpeaking11\Roaming Users
n If users log in using a shared Windows user ID, the best way to control access is through HTTP
Roaming. In this configuration, you set up a web server running either IIS or Apache and with
the WebDAV file system enabled. On each workstation, you specify a URL on the web server
as the Roaming User Profile location. When a user launches Dragon, before displaying the Open
User Profile dialog it prompts for a user name and password, which it uses to authenticate
against the web server.
You can use file permissions on the web server to specify which User Profiles are accessible to
each account on the web server. File security is a function of the web server and the WebDAV
software.
Making it easier for users to select their User
Profiles
As described above, the Dragon Open User Profile dialog shows a list of all of the User Profiles in
a shared directory (unless you are using HTTP Roaming to limit access to User Profiles). If there
are more User Profiles than will fit on one screen, you can train users to go directly to a specific
User Profile by typing the first few letters of its name.
248