Ssh shell accounts windows#

If only one of the user's groups has an SSH server group settings entry, that group settings entry will be used, as long as it appears above the Everyone group. If none of the user's groups have an SSH server group settings entry, the Everyone group settings entry will be used. If any of these conditions is not met, Bitvise SSH Server looks up the local and domain groups of which the account is a member:

Ssh shell accounts windows#

If the SSH server was able to find a match for a Windows account settings entry in SSH server settings, and if this entry uses the 'Specify group' setting, then Bitvise SSH Server will use the configured group settings entry, under the following conditions: that the specified Windows group settings entry exists in the first place and that the Windows account is actually a member of that group. If the 'Specify group' option isД®nabled, it is used to choose the account's group settings entry.

If a match is found, the settings in the account entry are superimposed on the settings found for the account's group. The SSH server searches the entries in 'Windows accounts' to find a match for the account that's logging in. When a user tries to log into Bitvise SSH Server with a Windows account, the server determines the settings for that account in the following manner:ДЄccount settings. In a default configuration, the SSH server settings for the Everyone group apply to all Windows accounts that log in via SSH. It consists of a single 'Everyone' group. Windows groups and accountsД«y default, the Bitvise SSH Server configuration for Windows groups and accounts is very straightforward. Settings provide the means to add users in Bitvise SSH Server without having to create separate Windows groups, or having to create and maintain a Windows account for every user. Bitvise SSH Server settings do not replace Windows permissions, but provide complementary settings which Windows does not provide on its own.ДЄdditionally, virtual groups and virtual account The groups and accounts in SSH server settings are an additional layer of security, imposed by the SSH server on top of the Windows permission system. The groups and accounts sections of Bitvise SSH Server's Advanced settings provide the means for this configurability. Most administrators will find it desirable to configure Bitvise SSH Server in a way that restricts users' access further. Such actions include accessing the terminal shell, running a program, uploading and downloading files, or connecting to another machine using SSH port forwarding. Under default settings, the server will allow any successfully logged on user to take any action that the user is permitted by Windows and file system permissions. When a Windows account user logs in, Bitvise SSH Server will impersonate the security context of that Windows account throughout the user's SSH session. Unless configured differently during initial setup, Bitvise SSH Server will accept password, NTLM or Kerberos-based login to any Windows account that has Windows permissions log into the machine where the SSH server is running.

Configuring groups and accounts in Bitvise SSH Server