Allow staff to see a website but block students

[adamyoung]

We have a webpage running on our intranet server that we dont want students to be able to see.

We run a windows server 2003 network and the staff are in one group and the students in another.

As we have recently moved to windows we're not sure how we can block access for students but allow for staff (it was much easier when we had ranger!) somewhere in group policy?

[Mango_RW]

is it possible to run an asp script which will check the group of the logged on user, if staff show one page, if not show an error page?

[Mango_RW]

is it possible to run an asp script which will check the group of the logged on user, if staff show one page, if not show an error page?

[RobC]

If it's running locally on your web server, just change the permissions of the html or asp page you wish to restrict as you would any other file on the network. I use this to restrict our system status page to staff only.

[adamyoung]

Ive tried RobC's idea but it doesnt seem to work, it just denies access to everyone.

 

I am running Apache, MySQL and PHP on a Windows 2000 Pro box if thats any help (we've kept it separate from our main unix web server)

[Geoff]

I am running Apache, MySQL and PHP on a Windows 2000 Pro box if thats any help (we've kept it separate from our main unix web server)

 

You'll either need to switch to IIS on W2k or Apache on Linux. Apache on W2k doesn't understand NTLM authentication.

[Dos_Box]

NTFS permissions. Easy peasy. Pupils=DENY!

[StewartKnight]

have you tried using .htaccess & .htpasswrd?

[adamyoung]

If i switch to apache on linux how can i control access.

 

I like the idea of using apache as this works well for us on our main server whereas I dont seem to be having much success with IIS on W2K

[Geoff]

You setup Samba and Winbind as per usual for a domain member. Your distro should have information on how to do this.

 

Then you use mod_auth_pam on your apache site.

 

http://pam.sourceforge.net/mod_auth_pam/configure.html

 

Amusingly, the example supplied on the above page should be sufficent for your needs.

[Guest MD5T]

How can this be accomplished using a linux server with Apache?

[Fazza]

NTFS permissions. Easy peasy. Pupils=DENY!

 

That's what I've done in the past - as long as you know where the files are you can just set NTFS permissions and voila!

[Arthur]

NTFS permissions. Easy peasy. Pupils=DENY!

Wouldn't it be easier just to omit the pupils from the NTFS permissions? Without any permissions defined the pupils can't access the files/folders anyway and it's a bit neater.