password protect login.aspx

[osi60]

Hello,

 

An administrator was recently let go and I know he has a handful of our 120 member faculty. The only thing that is public facing is HAP+. I have researched and have not found a way to password protect login.aspx. My plan is to make all users enter a single username and password before being able to sign into their account. Can someone point me to a good tut on achieving the task? I've tried this page's tut but the logon still shows.

 

https://support.winhost.com/kb/a671/password-protecting-directories-in-iis.aspx

 

Thank you

Edited June 29, 2018 by osi60

[nickbro]

From a security point of view I would suggest changing any password he would of had access to. Even if you lock HAP+ down as suggested (which I wouldn't suggest as a common password isn't really security) he could still get into your network if they got into the school building.

[osi60]

Hello Nick,

 

Thanks for the feedback. We have changed high priority users' pw. But there are over 100 users what we cannot change until they all are in the building. The old admin has been restricted from the building. In any case that is not an I.T. problem anymore. The security guards are aware that he is no longer allowed on the grounds.

 

Anyway, We have found a way to secure it by setting up basic auth on the original URL, then redirecting it to the new HAP+ URL.

 

Regards

[nickbro]

Ok, yep that's the way to do it.