Documentation forAccess Rights Manager

Blacklist - exclude users and groups from use

In the Change Configuration - File Server window > Group Wizard tab, the Blacklist menu is where you can determine which users and groups are excluded from using ARM for granting and removing access.

You can access this window in the File server change configuration.

In the Blacklist, you can:

Add entries to the blacklist

You can determine which domain is searched based upon the log in credentials. By default, ARM uses the credentials from the basic configuration.

When you search for a user or group, a live request is sent to Active Directory (AD). This search works independently of existing AD scans. In the legacy 8MAN licensing, the search only works in licensed domains.

If you enter a domain name in the search field (for example: domain2\another.user"), ARM searches the entered domain (domain2).

If you do not enter a domain name in the Search field, the domain is selected based on the credentials.

Add a user to the blacklist

To add a user or group to the blacklist you can:

  • Double-click the object
  • Drag and drop the object
  • Right-click the object and select from the context menu
  • Click the green plus icon

Remove entries from the blacklist

Filter the entries and remove the targeted entry by:

  • Right-clicking the object and selecting an option from the context menu
  • Drag and drop the object to the recycle bin icon
  • Click the X icon
Default entries with the Internal type cannot be removed.

Restore default blacklist entries

In the factory settings, the blacklist contains 39 default entries. These are Microsoft built in/predefined accounts and should not be used in conjunction with ARM

You can remove and restore the entries highlighted with a green indicator. This may be required if you need to remove "Everyone" access rights, for example.

When you restore the blacklist, only the removed standard entries are added again. Any individual additional entries remain stored in the blacklist.

The Internal entries are marked with a lock and gray font and can not be removed.