HAP+ Not following security groups

[round2it]

Hi all

 

After a couple of years using hap with perfect results I seem to have an issue with hap not following security groups

 

I have a drive letter mapped for staff and I have a security group call hapstaff this contains all the users that should see the drive letter within hap. NTFS permissions also assigned for security

 

I removed a user from the hapstaff group but they are still seeing the drive letter

 

the only groups I have for read security within hap are hapstaff and domain admins

 

anyone seen this behaviour before I restart the server.

 

maybe its an iis thing that a reboot might fix

[round2it]

nope still happening

[ncoules]

I have the same issue, came on all of a sudden so I am not sure if it's related to windows update for .NET

 

Just trying to work out what it is doing but hitting a brick wall.

[round2it]

Yea me too maybe @nickbro might be able to throw some light on this.

[beneal]

Did either of you get anywhere with this? We have a similar issue. Visibility of drives in HAP seems to work as it should and follows groups if they're set. However, staff can't write/upload to folders where their permissions are set via security group.

[nickbro]

You may need the latest HAP+ release which fixed the issue for my install. Had an issue where some Windows Update broke .net's security group lookups, I put some logic to ignore errors when looking groups up rather than failing completely to get any groups. If you have issues with the 10.6 update just extract the hap.ad.dll which doesn't copy the other fixes.

 

If you have further issues you may need to set some constrained delegation stuff in AD to permit the computer user delegated access to the file system service on the file servers

[martman2002uk]

You may need the latest HAP+ release which fixed the issue for my install. Had an issue where some Windows Update broke .net's security group lookups, I put some logic to ignore errors when looking groups up rather than failing completely to get any groups. If you have issues with the 10.6 update just extract the hap.ad.dll which doesn't copy the other fixes.

 

If you have further issues you may need to set some constrained delegation stuff in AD to permit the computer user delegated access to the file system service on the file servers

 

@beneal, did you ever get your HAP sorted ? i've tried the fix as suggested by @nickbro, and while it does give access to "New Folder" and "Upload" the page doesnt show any files/icons etc.... I have HAP working perfectly on a Server 2016 install, but running into this issue on 2012 R2, am i missing a .net update ?

 

Running out of ideas at the mo....

[beneal]

@martman2002uk Afraid not. Haven't looked at it in a while but if memory serves I tried Nick's suggestion with the hap.ad.dll and it just broke completely. We've generally just been advising staff to use this if they want read access to network files but use OneDrive or offline files if they actually want to work on stuff.