How to add a new client to the cloud!
Setting up Security Group
Go to Start,
Active Directory Users and Computers
Click harquin.local and then harquin
Select Security Groups
Right Click on “security groups” and choose “New” then “Group”
Name : SG-clientName (SG-massageMania) (no spaces and use camelCasing)
Select Universal and Security.
Hit “ok” to save
Setting up users
Under harquin click Clients.
Right click, New, User
Enter The company name – part in “first name” and part in “last name”.
User Logon name: clientfirstnamelastname (jessikaferm)
Create client pw: City#####(zip) (ex:Cols43228) has to have one cap and be 8 characters
Uncheck must change, check user cannot change PW, check Password never expires, keep account is disabled unchecked.
Record both username and pw in the User List spreadsheet in cloud folder.
On the Client list, double click the name of the user you just set up.
Select “Member Of” tab.
Click Add button
In box enter: sg-remote; sg-clientgroup (sg-jferm)
***NEW*** Instead of adding “sg-remote” add “sg-clientRemote” and this gives access to the client cloud rather then cloud.harquinbookkeeping.com.
Click “Check Names” button. If the groups are valid they will be underlined.
Click Ok, Apply.
Select “Sessions” tab.
change “end a disconnected session” to “30 minutes”
change “active session limit” to “1 day”
change “idle session limit” to 3 hours
under “when a session limit is reached or connection is broken” choose “end session”
under “allow connections” choose “from originating client only”
hit “apply” to save changes.
Create file structure for new clients
Go to Storage Q:, clients
Right click on A_sampleclient and select copy.
Rename the file = client name
Right click properties, security tab and click advanced button towards bottom.
Click change permissions
Uncheck the box that says Include Inheritable permissions.
A pop up will come up and select “Remove” button. The click “ok”. Then “yes”. Then “ok”
From Security tab click the “edit” button in middle right.
When setting up from scratch (if Lindsey didn’t create the folder) then add “administrators” **with the s on the end) this gives access to Lindsey, Kevin and anyone deemed admin!**
Click “add” and add SG-(companyName) For the main folder set to (no change)(read & execute, list folder contents, read).
Add “Domain Admins (no change)(read & execute, list folder contents, read)
Hit “ok” to save and close the security box.
Double click the clients folder to show the sub folders
Right click on the “internal” folder and choose “properties”, then choose the “security” tab and hit “edit”.
In this window make sure that the SG-companyName is highlighted then…
Add “Internal” folder = Edit security for the SG-(companyName) and deny all permissions.
Add “QuickBooks” folder>Which contains a file for “Company File” and “Backup” folder – check “full , modify, read & execute, list folder contents, read, and write”.
Add “Inbox” folder = Change to “full control” for client.
Add “File Cabinet” folder= Read & execute, list folder contents and read (no change) (harquin can read and write though)
If they have a “Payroll” folder = (no change) set to “read and execute” permissions for the client.
After adding user then log in and change their internet security to the lowest setting.
If we need new file it should show in Asana here (see screen shot below)
***Pin Quickbooks application to the taskbar instead of putting it on desktop***
1.log in as client 2. Open up their QB file 3. Login to their QB file.
While logged in as client in QB file edit>preferences>send forms>company preferences>set to QB email.
Send a test email- open report send as pdf to yourself
Open IE and lower security setting
Also set default browser as Google
Log in test- start from scratch as if client were logging in for first time make sure all functions work- File explorer only shows their folder, QB opens ready for them to log in they should not have to locate file. etc
**new step** Add tech section to client notes:
How about this. Add to the client notes any special notes. Make a Tech support area and add who your contact is every time you setup a new client(I will add this to your template) and then anytime there are special updates like for Robert and Eric, you can say as of 11.1.17 – Robert no longer apart of company and not allowed to access cloud..