fairm010 Posted December 9, 2013 Posted December 9, 2013 Hi, I have HAP set up and it works great! Ive tweaked the CSS & HTML and it looks great. Having shown it to the head he loves it but wants to open it to students too. When a student logs in they can see the staff drives (Which I guess is by design). Is there any way to seperate them? Students see their shared drives and staff see theirs? TIA Matt
NKPaul Posted December 9, 2013 Posted December 9, 2013 You use security groups in the enablereadto and enablewriteto enablereadto="GG Students,GG Staff" enablewriteto="GG Staff" visible to students and staff but only staff can save enablereadto="GG Staff" enablewriteto="GG Staff" only visible to staff
fairm010 Posted December 9, 2013 Author Posted December 9, 2013 I click Custom but the Active Directory Browser just sits at a blank screen. Also what does "GG" mean here? Matt
synaesthesia Posted December 9, 2013 Posted December 9, 2013 Those will be security groups - so you'd use whatever security groups you have for staff and students to keep them separated
fairm010 Posted December 9, 2013 Author Posted December 9, 2013 Just plain group as in "Staff" or in format "domain\Staff". I'm so confused! Matt
synaesthesia Posted December 9, 2013 Posted December 9, 2013 Just the group names - you should have your active directory credentials already set up on HAP so it'll know the domain etc. So if your security group for staff is "sch staff" just use sch staff.
fairm010 Posted December 9, 2013 Author Posted December 9, 2013 Ive done it. Editing hapconfig.xml using domain\group and it worked. Thanks, Matt
fairm010 Posted December 9, 2013 Author Posted December 9, 2013 Nope, not working . Im using staff - the name of our staff security group, and the kids can still see it matt
fairm010 Posted December 9, 2013 Author Posted December 9, 2013 I wonder if @nickbro can help? This is from my hapconfig.xml \\server4\StaffOnly$ matt
nickbro Posted December 9, 2013 Posted December 9, 2013 Odd they shouldn't see that drive as it's set to only show to staff, try recycling the application pool (touch the web.config file) Here are my mappings %homedir% \\cri-svr-001.crick.internal\Shared Areas \\CRI-ADMIN.crickadmin.internal\homes\%username% We map to a DFS shared area which intern processes the NTFS bits
fairm010 Posted December 9, 2013 Author Posted December 9, 2013 How odd. Out of curiosity what does enablemove do?
fairm010 Posted December 9, 2013 Author Posted December 9, 2013 You'll love this one. I was testing with our normal pupil test account, which our other tech made a member of staff for testing! Problem solved, all working! matt
nickbro Posted December 9, 2013 Posted December 9, 2013 Hahaha love it. enablemove is a legacy bit of code, it can be ignored now
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now