Denying users or groups remote access to HAP

[zoohead]

Hi

I am having a problem denying individual users or an AD group access to HAP. If I set anything in the option within the web.config file, the HAP login page does not load properly for clients and shows the following "An error occurred in Home Access Plus+ Page: HAP.AD Invalid Administrator Credentials, you may need to get your administrator to reset the HAP+ Settings for Active Directory System". I have tried resetting the AD password on the setup.aspx but it makes no difference. I need to deny remote access to a group of controlled assessment user accounts so any advice would be greatly appreciated.

 

Ian Mason-Laurence

Network Manager

Plymstock School

[DPenfold]

I don't know if this would be any help/use but since no one is responding at the moment why not offer this thought/suggestion...

 

My thought is that you can only set privileges to groups and not individual users; we had something similar where we wanted to give access to a drive to 1 or few members of staff however we were unable to gives single access to selected users only groups. In the end we allowed access to a group (our Admin) since they would have access here at the school anyway (and we can removed it when our remote desktop connection is rolled out etc.)

 

For yourself why not group off people to users to have access to hap from those you do not want access; like having group called 'Student HAP access' and assign what ever students you want to this group and then another (for reference only) 'Student HAP Denied access'. Then HAP can be assigned to the 'Student HAP access' group (HAP Thinking this is 'all students' etc.) but you have the full control to deny students.

 

May seem little redundant for multiple groups but maybe little easier and a quick solution now.

 

Hope this helps .

[zoohead]

Thank you for the advice. I still can't get it to work properly at the moment so have gone old school and restricted the AD accounts log on hours to school hours only.

[DPenfold]

Shame to hear Hope someone could be better support

 

Also your temp solution, didn't know that was even possible lol

 

Good luck

[nickbro]