+ Post New Thread
Results 1 to 7 of 7
Internet Related/Filtering/Firewall Thread, Deny Student access to Staff intranet in Technical; We have a Smoothwall UTM-1000 & two intranet servers (one for staff & one for students). I need to stop ...
  1. #1

    Join Date
    May 2007
    Location
    Saint Andrews
    Posts
    23
    Thank Post
    5
    Thanked 2 Times in 2 Posts
    Rep Power
    15

    Deny Student access to Staff intranet

    We have a Smoothwall UTM-1000 & two intranet servers (one for staff & one for students). I need to stop the students having access to the staff intranet server but cannot workout how to do this using the UTM or GPO.

    Any ideas?

    Thanks
    Mike Taylor
    St Leonards School
    St Andrews

  2. #2
    hil
    hil is offline
    hil's Avatar
    Join Date
    Nov 2009
    Location
    Devon
    Posts
    80
    Thank Post
    5
    Thanked 4 Times in 4 Posts
    Rep Power
    10
    You should be able to set the security on the staff folder to staff or something like that.

  3. #3

    Join Date
    May 2007
    Location
    Saint Andrews
    Posts
    23
    Thank Post
    5
    Thanked 2 Times in 2 Posts
    Rep Power
    15
    Thanks for the quick reply Peter. Tried that but because the Staff Intranet site has been setup to allow anonymous access in IIS this doesn't work.

    Mike

  4. #4


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,638
    Thank Post
    275
    Thanked 778 Times in 605 Posts
    Rep Power
    223
    Tell us what (other than username + AD security groups) on your network can be used to determine "a student is using this machine" vs "a staff member is using this machine?"

    If the IIS box has no means of determining that (ip ranges, reserved sections of ip range) and treating traffic appropriately, you'll have to do that another way. If it can distinguish the difference, you could simply modify the firewall.

    Is turning on Windows Authentication for the staff intranet server an option?

    Does traffic go through the SW box in order to reach either server, or do users go direct to anything on the local network (proxy exceptions)?

  5. #5

    Join Date
    May 2007
    Location
    Saint Andrews
    Posts
    23
    Thank Post
    5
    Thanked 2 Times in 2 Posts
    Rep Power
    15
    Due to nature of the beast - students & staff access the same pcs in the IT Labs so can't put in controls by IP Address. The only way to apply security is via AD Groups.

    We have a Smoothwall UTM-1000 in place (which all traffic passes through Internal & External) but I can't find anything that seems to be able to do this.

    Mike

  6. #6

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,137
    Thank Post
    215
    Thanked 1,259 Times in 790 Posts
    Blog Entries
    4
    Rep Power
    507
    Why not set IIS to use AD authentication instead?

  7. #7
    jdoyle's Avatar
    Join Date
    Mar 2008
    Location
    Republic of Swindon
    Posts
    393
    Thank Post
    68
    Thanked 49 Times in 42 Posts
    Rep Power
    57
    on the intranet I inherited (IIS box with ASP/vbscript) we had the script in the home page checking for AD group membership and displaying different content/menus accordingly. Access rights on some of the staff only folders as extra security.

    Now moved to Sharepoint 2007 and it's a similar approach.

SHARE:
+ Post New Thread

Similar Threads

  1. Giving Administrators and Staff access to Student Home Drives
    By madman070578 in forum Windows Server 2000/2003
    Replies: 6
    Last Post: 22nd October 2009, 07:51 PM
  2. Staff access to student work
    By AngryITGuy in forum Network and Classroom Management
    Replies: 31
    Last Post: 22nd June 2009, 12:57 PM
  3. Deny access to RDP & CMD
    By mcloum in forum Wireless Networks
    Replies: 10
    Last Post: 12th January 2009, 01:50 PM
  4. Staff Access to Student Home Drives?
    By noser in forum Windows
    Replies: 15
    Last Post: 21st October 2008, 02:55 PM
  5. Student Intranet
    By Sirbendy in forum How do you do....it?
    Replies: 13
    Last Post: 19th May 2008, 01:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •