nickbro

You can deny users in the web.config,

Can you check the api at /hap/api/ad/roles/user to see if HAP+ is able to pull all of the groups out of AD successfully. Did you follow the instructions on the setup.aspx page to lock the setup page down?

The username should just be administrator. If HAP+ is working you can ignore the AD Cross, it's there for initial setup. The password isn't rendered out after a reload for security purposes. If the shared areas aren't working that points more to a NTFS delegation issue, are you using DFS or FQDN?

No new instructions, there is a new video https://www.youtube.com/watch?v=LCL3Tj55ns0

If it exists at the top level you don't need to add it at the sub level

You shouldn't notice any difference, it will just mean that you have to be logged in to access setup.aspx, by default this is accessible to everyone.

The warning at the top is explaining how to lock down the setup.aspx page so only Domain Admins can access it, open web.config in notepad, find the section at the top (the to is meant to be on the line below), then replace the whole lot with the new bit.

Not currently, I think paul may of implemented something through the static bookings

You don't need port 80, just 443, you need to make sure it's HTTPS not http. HAP+ is basically like another computer on the network, only as secure as your setup is. I'd recommend following some of the guides to lock your server down, but that shouldn't really be needed as IIS is fairly secure by default.

It's a known bug, something slightly odd with the logging logic is what causes it, you can figure the download path out by using the previous log entry (the list) which has the correct root path

You don't need to enable Windows Authentication unless you don't want Forms authentication at all, it's mainly meant to be used when behind a reverse proxy which does that sort of thing, in that situation you remove the internal IP addresses, and set in the web.config file over to Windows authentication mode, and add to the AD element mode="Windows"

It's an advanced feature to enable Windows Authentication HAP+ wide, it is in the documentation, but the default setup is for Forms Authentication and SSO Kerberos internally.

Hmm, have you defined the IP address ranges for internal addresses so the SSO can work correctly, it kinda sounds like that is missing and it's trying to log everyone in with Kerberos/NTLM. You can try out turning off SSO in HAP and revert to the login page. My Files will not work when a user logins in via SSO, as such neither will the tile. Unless you are using Windows Authentication over Forms. From the looks of your config you are using Windows Authentication for the whole site rather than forms, have you set the authentication method in the hapConfig.xml file to Windows (instead of Forms)?

There isn't an easy way to do this, you would need to customize the login process to maybe issue some additional cookies. There's some methods in the HAP.AD dll to get the users password to pass to additional services, then attach a cookie which that service give you.

Hmm, there must be a slight setup problem with your HAP+ install there, it looks like it's impersonating the user in the request to kerberos.aspx as you shouldn't need to add any additional permissions. Can you check applicationHost.config in the inetsrv folder that this exists

Ok, it's coming up with an error that the admin password is wrong

Did you change %username% for one of the users you are testing?

That is odd, can you paste your terms.xml file please

Check /hap/api/ad/roles/%username% to check HAP is getting the AD groups correctly. You can also do some http://www.edugeek.net/forums/home-access-plus/86059-hap-json-debugging.html to find out if HAP+ is reporting the correct permissions back to the browser

You can use StartSSLâ„¢ Certificates & Public Key Infrastructure, you can use IIS to create a CSR or follow the wizard on the site. Most sites also include instructions on how to install the certificate as well.

Which version of the booking system are you using? It should be v10.5 of the hap core and v4.6 of the booking system. You should be able to reference fullCalendar again after the after hap load script reference and it should override the function if it's later, alternatively delete the contents of fullCalendar.js and then reference your own version. Unfortunately fullCalendar is a dependency referenced in the code of hap.bookingsystem.dll

Flat network for me too, the only VLAN I have in place is to isolate the youth workers from our network, they drop onto the counties corporate network on a different subnet. Powys are fairly relaxed about what high schools do with their network, only really requiring a VLAN for split sites (Youth/Sports/School on one site). I got rid of our two AD (curriculum/admin) network a few years ago, haven't had an issue. Very few PCs have SIMS on them anymore, since registers are done via Go4Schools which is web based.

All HAP+ will do is provide a link to the RMMC link, you can use IIS Application Request Routing to route the CC4 requests to the PDC

Follow the instructions to setup the tracker, specifically the SQL database, this will enable the web tracker. You don't need to deploy the logon tracker, just follow the instructions for setting up the sql database http://www.youtube.com/watch?v=h3-nt2VZCt0

Try this updateBookingSystemPatch.zip