+ Post New Thread
Results 1 to 7 of 7
Home Access Plus+ Thread, confusion setting this software up... in Projects:; I can't seem to find anything in the Documentation (what little there is of it) that explains why during the ...
  1. #1

    Join Date
    Jun 2013
    Posts
    23
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    confusion setting this software up...

    I can't seem to find anything in the Documentation (what little there is of it) that explains why during the setup, the Active Directory tab asks me to specify a STUDENTS GROUP. What is the purpose of this group?

    Also, How can I prevent a certain group of users having access to HAP+? I *only* want staff/teachers to have access to get their H: drive from home. I am having trouble understanding how to do this.

    Please advise.

  2. #2
    nickbro's Avatar
    Join Date
    Jul 2010
    Location
    Gilwern, Wales
    Posts
    3,483
    Thank Post
    37
    Thanked 490 Times in 422 Posts
    Rep Power
    110
    The search function on this forum would be the best bet (when it's working).

    The students group name is used is parts of HAP to identify users as being students (the user card, logon tracker, etc...)

    To lock it down, edit the web.config file, look for the top authorization rules:
    HTML Code:
     <authorization>
          <deny users="?" />
        </authorization>
    Change it to
    HTML Code:
     <authorization>
          <allow roles="x" />
          <deny users="*" />
        </authorization>

  3. #3

    Join Date
    Jun 2013
    Posts
    23
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I've been using SEARCH non-stop since installing this product, but the search function isn't all that useful considering it rarely brings up the information I need.

    I don't understand what you are asking me to do. To lock down HAP+ so ONLY staff/teachers have access to it, you want me to type:

    <authorization>
    <allow roles="x" />
    <deny users="*" />
    </authorization>

    in the web.config file... EXACTLY that? or does "x" need to be replaced with an Active Directory group or something? If I type exactly what you said, that doesn't make any sense as to how the software will know how to block everyone except teachers/staff. And yes, I've TRIED searching for this answer. So if you can PLEASE provide a more detailed answer, or EXAMPLE, I'd greatly appreciate it.

    Thanks.

  4. #4
    nickbro's Avatar
    Join Date
    Jul 2010
    Location
    Gilwern, Wales
    Posts
    3,483
    Thank Post
    37
    Thanked 490 Times in 422 Posts
    Rep Power
    110
    x needs replacing with the AD groups you use for staff. i.e. "Domain Admins, Staff" (where comma is a separator)

    This is actually core IIS stuff, not hap specific.

  5. #5

    Join Date
    Jun 2013
    Posts
    23
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I'm sorry to report, but your suggestion did not work. My web.config file looks like this now:

    <authorization>
    <allow roles="Domain Admins />
    <deny users="*" />
    </authorization>

    But when going to the website now, it shows..
    HTTP Error 500.19 - Internal Server Error

    The requested page cannot be accessed because the related configuration data
    for the page is invalid.


    Detailed Error Information

    Module IIS Web Core
    Notification Unknown
    Handler Not yet determined
    Error Code 0x8007000d
    Config Error Configuration file is not well-formed XML
    Config File \\?\C:\inetpub\HAP\web.config



    Requested URL https://remote.oakcreek.k12.wi.us:443/
    Physical Path
    Logon Method Not yet determined
    Logon User Not yet determined

  6. #6

    Join Date
    Jun 2013
    Posts
    23
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    it also says this on the error 500.19 page.

    39: <allow roles="Domain Admins />
    40: <deny users="*" />
    41: </authorization>

  7. #7

    Join Date
    Jun 2013
    Posts
    23
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I forgot the trailing END-QUOTE....

    adding it gets rid of that error but creates a whole new error when logging in.... *sigh*..

SHARE:
+ Post New Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •