MQSeries.net :: View topic - mqsicreateaclentry with domain user and MachineName

jkb

Hi,

I have a config mgr running on a windows server called B1963. I can access the server from my workstation via remote desktop with user res\jkbadmin. We are three users from the res domain that need to be able to deploy to the config mgr.
For security reasons I want to restrict the access so these users can only deploy when they are logged on to the server B1963 where the config mgr runs.

I have tried
mqsicreateaclentry cnfigmgr -u res\jkbadmin -m B1963 â€“x F -p
mqsicreateaclentry cnfigmgr -u jkbadmin -m B1963 â€“x F -p
mqsicreateaclentry cnfigmgr -u B1963\jkbadmin -m B1963 â€“x F -p
But it does not seem to work. When I try to access the config mgr via the toolkit it says that "BIP1711W: The ConfigManagerProxy is not viewable by user res\JKBADMIN"

When I write
mqsicreateaclentry cnfigmgr -u jkbadmin -a -x F -p
then I can access locally and from remote.

I have tried on my workstation config mgr to create a LOCAL user "test" and it worked fine with the command
mqsicreateaclentry configmgr-u test -m workstation â€“x F â€“p

Is it not possible to restrict users in domain res to only access the config mgr locally?