ZCS Administrator's Guide, Open Source Edition, 6.0.8
Table of Contents Previous Next Index


Customizing Accounts, Setting General Preferences and Password Rules : Other Configuration Settings for Accounts

Other Configuration Settings for Accounts
Other configuration options include:
Specifying default behavior the appearance of a warning message when navigating from ZWC and the appearance of check boxes for items listed on the Content page for email and contacts
Enabling Sharing
When the Sharing feature is enabled, users can share any of their folders, including their mail folders, calendars, address books, task lists, Document notebooks and Briefcase folders.
Users specify the type of access permissions to give the grantee. They can share with internal users who can be given complete manager access to the folder, external guests that must use a password to view the folder content, and the public access so that anyone who has the URL can view the content of the folder.
When internal users share a mail folder, a copy of the shared folder is put in the grantee’s folder list on the Overview pane. Users can manage their shared folders from their ZWC Preferences Sharing folder. In this folder users see a list of folders that have been shared with them and folders that they have shared with others.
Managing Shared Items using Distribution Lists
When distribution lists are used to manage shared items, members of the distribution list are automatically granted rights to the shared item. Administrators manage the shares from the DL’s Shares tab. All members of the list have the same share privileges that the grantee defined for the shared folder. When a member is removed from the distribution list, the share privileges associated with the DL are revoked.
Users must notify the administrator that they have shared a folder with the distribution list. When the administrator is notified, the administrator publishes the shared item in the Shares tab to make the shared item available to members of the DL. When a new shared folder is published, existing members of the DL are automatically notified of the new shared item.
New members added to the distribution list can be automatically notified about items that are shared with them. They can accept the shared item from their ZWC Preferences>Sharing tab.
Disabling Preferences
Preferences is enabled by default. Users can modify the default preferences that are configured for their account. You can disable preferences and the Preferences tab does not display in users’ mailboxes. They cannot change the default configuration for features that are set up for their accounts.
Setting Account Quotas
You can specify mailbox quotas and the number of contacts allowed for each account through the Zimbra administration console.
Account quota is the amount of space in megabytes that an account can use. The quota includes email messages, Calendar meeting information, task lists, Documents pages and files in Briefcase. When the quota is reached, all email messages are rejected and users cannot add files to their account. If you set the quota to 0, accounts do not have a quota. See Account Quota and the MTA
You can view mailbox quotas from the administration console, Monitoring, Server Statistics.
Users can be notified that their mailboxes are nearing their quota. The percentage threshold for quota notification can be configured. When this threshold is reached, a quota warning message is sent to the user. The quota percentage can be set and the warning message text can be modified in the Advanced tab settings for COS and Accounts.
The Address Book size limit field sets the maximum number of contacts a user can have across all of their address books. When the number is reached, users cannot add new contacts.
Setting Password Policy
If internal authentication is configured for the domain, you can configure ZCS to require users to create strong passwords.
Important: If Microsoft Active Directory (AD) is used for user authentication, you must disable the Change Password feature in their COS. The AD password policy is not managed by Zimbra.
The password settings that can be configured are listed below.
 
COS/Account Tabs
Minimum/Maximum password length
This specifies the required length of a password. The default minimum length is 6 characters. The default maximum length is 64 characters.
Minimum /Maximum password age
Configuring a minimum and maximum password age sets the password expiration date. Users can change their passwords at any time between the minimum and maximum set. They must change it when the maximum password age is reached.
Configuring the next settings will require users to create more complex passwords. Note: A password cannot included accented characters in the string. Example of accented characters that cannot be used: ã, é, í, ú, ü, ñ.
Minimum upper case characters
Minimum lower case characters
Minimum punctuation symbols
Minimum number of unique passwords history
Number of unique new passwords that a user must create before he can reuse an old password.
Users cannot change their passwords.This should be set if authentication is external.
Must change password
When a user logs in, he is required to change his password.
General Information
When this is enabled, users can change their password at any time within the password age settings from their account Preferences tab.
Setting Failed Login Policy
You can specify a policy that sets the maximum number of failed login attempts before the account is locked out for the specified lockout time. This type of policy is used to prevent password attacks.
 
COS/Account Tabs
When this box is checked, the “failed login lockout” feature is enabled and you can configure the following settings.
Number of consecutive failed logins allowed
The number of failed login attempts before the account is locked out. The default is 10 attempts. If this is set to 0, an unlimited number of failed log in attempts is allowed. This means the account is never locked out.
The amount of time in seconds, minutes, hours, or days the account is locked out. If this is set to 0, the account is locked out until the correct password is entered, or the administrator manually changes the account status and creates a new password. The default is 1 hour.
Time window in which the failed logins must occur within to lock the account
The duration of time in seconds, minutes, hours, or days after which the number of consecutive failed login attempts is cleared from the log. The default is 0, the user can continue attempts to authenticate, no matter how many consecutive failed login attempts have occurred.
Setting Session Timeout Policy
You can set how long a user session should remain open and when to close a session because the session is inactive,
COS/Account Tabs
Admin console autho token lifetime
Auth token lifetime sets a browser cookie that contains the auth token. Administrators can open the administration console without having to log on again until the auth token expires. The default is 12 hours.
Auth token lifetime sets a browser cookie that contains the auth token. User can open ZWC without having to log on again until the auth token expires. The default is 2 days.When it expires, the log in page is displayed and the user must log in to continue.
Session idle lifetime sets how long a user session remains active, if no activity occurs. Activity includes any clickable mouse action, such as viewing contents of a folder or clicking a button. The default is 2 days.
You can manually expire a user’s web client session from the administration console Expire Sessions link.This forces the current session of the account to expire immediately.
Setting Email Retention Policy
The email retention policy for email, trashed and spam messages is set by COS. When the message purge function runs is set by the message purge command.
 
COS/Account Tabs
Number of days a message can remain in any folder before it is automatically purged. The default is 0; email messages are not deleted. The minimum configuration for email message lifetime is 30 days.
Number of days a message remains in the Trash folder before it is automatically purged. The default is 30 days.
Number of days a message can remain in the Junk folder before it is automatically purged. The default is 30 days.
The server manages the message purge schedule. You configure the duration of time that the server should “rest” between purging mailboxes from the administration console, Global settings or Server settings, General tabs. By default, message purge is scheduled to run every 1 minute.
For example, when the purge interval is set to 1 minute, after mailbox1 is purged of messages that meet the message lifetime setting, the server waits 1 minute before beginning to purge mailbox2.
If the message purge schedule is set to 0, messages are not purged even if the mail, trash and spam message life time is set.
Note: Because users cannot see these message lifetime settings, if you set a purge limit, make the purge policy known to your users.
Zimbra Web Client UI Themes
The appearance of the Zimbra Web Client user interface can be changed. A number of Zimbra themes are included with ZCS, and you can create others. You can select a theme to be the default and the themes that users can select from to customize their user experience.
Note: To learn more about themes, go to the Rebranding and Themes section of the Zimbra Wiki.
 
When this is enabled, users can select different UI themes to display ZWC. Select the theme types that are available from the Themes tab.
The following theme usage options can be configured either from COS or by individual accounts:
Limit users to one theme. On the Features tab, remove the check mark from Change UI Themes. The ZWC theme is the theme listed in Current UI theme field on the Themes tab.
Let users access any of the installed Zimbra themes. If the Change UI Themes is checked, users can access any of the themes that are listed in the Available UI themes list.
 
Configuring Zimlets for Accounts
Zimlets™ is a mechanism for integrating and extending the functionality of the Zimbra Collaboration Suite with third party information systems and content.
Zimlets that are deployed on the ZCS servers are listed in the administration console Configuration>Zimlets section. Zimlets can be deployed and un deployed from here. See Working with Zimlets for how to install and deploy Zimlets.
When a Zimlet is deployed, it is immediately available to everyone in the default COS. If a Zimlet is not deployed to another COS directly, the COS displays the Zimlets but they are not enabled.
You can set access privileges to Zimlets by COS, by account, and by domain.
The Zimlet tab displays all Zimlets that are deployed and shows the status of the Zimlet:
Enabled. All Zimlets that are deployed are enabled. Users can disable a Zimlet from their account’s Preferences>Zimlet page.
Mandatory. If you want a Zimlet to always be enabled in users’ accounts, select mandatory. Users do not see these Zimlets on their Zimlet page.
Disabled. If you do not want a Zimlet immediately available to users in this COS, you can disable the Zimlet. Users can enable a Zimlet from their account’s Preferences>Zimlet page.
ZCS includes pre configured Zimlets that enhance the user experience while working in the Zimbra Web Client. These Zimlets are already deployed and enabled in the default COS.
com_zimbra_date. When users click on a date either in the email or on the mini-calendar, their calendar schedule for that date displays.
com_zimbra_email. Users can see complete contact information if it is available in their address books.
com_zimbra_url. This makes a link to the URL mentioned in the message.
com_zimbra_phone. Users can click on a phone number that displays in any of the application pages to quickly call that number if they have the installed a VOIP software application such as Skype or Cisco VOIP. When they click on the phone number, the VOIP application is launched.
Other Account Configuration Preferences
The following preferences can be set up:
Display a warning when users try to navigate away from Zimbra. It is easy for users to click the Back and Forward arrows in the browser or close their browser without logging out of their account. If this preference is not checked, users are asked if confirm that they want to navigate away from there account. If this preference is checked, the question is not asked.
Show selection checkbox for selecting email and contact items in a list view for batch operation. If this is enabled, when users view email messages or contacts in the Content pane, a check box displays for each item. Users can select items from the Content pane and then perform an action such as mark as read/unread, move to a specific folder, drag and drop to a folder, delete, and tag for all those selected items. A checkbox in the toolbar lets users select all items in the Content pane at once.
Preferences Import/Export.
The Preferences Import/Export tab lets users export all of their account data, including mail, contacts, calendar, tasks, Documents notebooks and Briefcase folders. They can export specific items in their account and save the data to their computer or other location. The account data is saved as a tar-gzipped (tgz) archive file so that it can be easily imported to restore their account. Individual contacts are saved as .csv files, and individual calendar files are saved as .ics files. The data are not removed from their accounts. The exported account data file can be viewed with an archive program such as WinRAR archiver. Any of these files can be imported into their account from the same tab.
If you do not want users to the Import/Export capability, you can disable the feature from the COS or Admin Features tab.

Customizing Accounts, Setting General Preferences and Password Rules : Other Configuration Settings for Accounts

Table of Contents Previous Next Index
ZCS Administrator's Guide, Open Source Edition, 6.0.8
Copyright © 2010 Zimbra Inc.