nickbro

Did you replace the App_Data folder when you upgraded? If so you will need to restore that folder from a backup

Can you provide that section of the hapConfig.xml file please?

hmm, that's for the calendar page not the default page, have you set up your resources in the config section yet? There should be some JSON queries going out to request bookings available for each resource.

If you use firebug it usually will tell you what is wrong, in my case it was stupid cors

They will be a future release, you can always download the latest source code and compile HAP+ yourself to test it Home Access Plus+ - Source Code Thanks for the code fix, I've put it into the latest source checkin

As requested

looks like it's failing to load the calendar jquery plugin, check that the fullCalendar js file exists in the scripts folder

That should work, do your pcs use a different dns name from the domain name? Do you have reverseDNS setup? HAP+ uses reverse DNS to check that the IP address is internal and is on the same domain (allows for multiple domains to exist on the same network but only auto login on the one HAP+ is installed on)

Ok, here's some working code, some changes are needed to the web.config file Add this to the element: You can replace * with your top level domain name if you want, e.g. st-augustines.worcs.sch.uk This is my test code I then used: Username: Password: <br /> $("#login").click(function () {<br /> $.ajax({<br /> url: "https://portal.st-augustines.worcs.sch.uk/hap/api/ad/" + $("#username").val() + "/" + $("#password").val(),<br /> type: "GET",<br /> success: function (data, textStatus, jqXHR) {<br /> Set_Cookie("token", data.Token1.replace(" ", "+"), "/", ".st-augustines.worcs.sch.uk", true)<br /> Set_Cookie(data.Token2Name, data.Token2, "/", ".st-augustines.worcs.sch.uk", true)<br /> location.href = "https://portal.st-augustines.worcs.sch.uk/hap/";<br /> },<br /> error: function (jqXHR, textStatus, errorThrown) {<br /> <br /> }<br /> });<br /> return false;<br /> });<br /> <br /> function Set_Cookie(name, value, path, domain, secure) {<br /> document.cookie = name + "=" + value +<br /> ((path) ? ";path=" + path : "") +<br /> ((domain) ? ";domain=" + domain : "") +<br /> ((secure) ? ";secure" : "");<br /> }<br /> You will need to add a way of detecting failed logins. The one problem with this method is it doesn't allow the user to log off unless they close the browser. One way of possibly solving could be via setting the forms authentication domain component to the top level domain Then to the element add domain=".st-augustines.worcs.sch.uk" But I haven't tested that

You will need to make sure you use the AJAX function not post, it requires the contentType (application/json) and set the dataType to json

Down the bottom of that page is the GPO's. The main one is a machine policy

Personally I'd use SCUP to publish the Adobe Reader and Flash Player updates in WSUS

You need to use front motion's firefox distro: Download FrontMotion Firefox CE It has GPO's which can be used to lock Firefox down. It's what I use here.

See the documentation, but here's an example

You won't be able to use that code to auto login, as ASP.net will reject the post as it doesn't contain a session id or any other .net related fields. There is however a JSON API which you can use (it's actually used by the Win 8 App). Do a jquery POST call to /api/ad/ /hap/api/ad/?2345666 { "Username": "someusername", "Password": "somepassword" } application/json This is what is returned: { "FirstName":"String content", "SiteName":"String content", "Token1":"String content", "Token2":"String content", "Token2Name":"String content", "Username":"String content", "isValid":true } You then set 2 cookies, one is called "token" with the content of Token1, the other is called he content of Token2Name, with the content of Token2. Set this as a session cookie, is a HTTPS cookie. That should be all you need to do, in theory. In theory someone could write a php front end for HAP+ and just use the .net system as a back end JSON server. In theory.

Moved out of Home Access Plus forum into General Chat

What is the error message that's coming up, the domain name doesn't match, or it doesn't trust startssl? It's it's the latter then you need to update your root certificates

You can try copying the NT6.exe file from your sims install to his

Seems there might also be AppLocker as well AppLocker Documentation for Windows 7 and Windows Server 2008 R2

Path Rules %LogonServer%\SysVol\* Security Level Unrestricted Description Allows logon scripts to run. Date last modified 21/01/2002 08:29:14 %programfiles%\* Security Level Unrestricted Description Included in case the Program Files folder is not located on the System Drive. Date last modified 21/01/2002 08:29:29 %programfiles%\Adobe\Illustrator 10\Plug-ins Security Level Disallowed Description Illustrator 10 Plug-ins Date last modified 14/05/2003 12:13:13 %programfiles%\Common Files\Adobe\Web Security Level Disallowed Description Illustrator 10 Date last modified 14/05/2003 12:10:37 %programfiles(x86)%\* Security Level Unrestricted Description Included in case the Program Files folder is not located on the System Drive (64Bit) Date last modified 28/03/2011 10:49:58 %programfiles(x86)%\Common Files\Adobe\Web Security Level Disallowed Description 64Bit security restriction Date last modified 28/03/2011 10:49:59 %SafeLocation0%\* Security Level Unrestricted Description Used to by-pass Software Restrictions. WARNING: DO NOT DELETE. Date last modified 21/01/2002 08:23:22 %SafeLocation1%\* Security Level Unrestricted Description Used to by-pass Software Restrictions. WARNING: DO NOT DELETE. Date last modified 02/04/2002 14:44:05 %systemdrive%\$recycle.bin\* Security Level Disallowed Description Prevent software from running in recycle bin Date last modified 30/07/2007 14:18:07 %SystemDrive%\* Security Level Unrestricted Description Allows programs to run if they are installed on the workstation's hard disk. Date last modified 21/01/2002 08:23:52 %systemdrive%\documents and settings\* Security Level Disallowed Description Prevent software from running from User profile Date last modified 25/07/2007 15:01:25 %systemdrive%\recycler Security Level Disallowed Description Terminal server security restrictions Date last modified 21/09/2007 10:35:37 %SystemDrive%\temp\* Security Level Disallowed Description Disable access to temp directory on the system drive. Date last modified 07/06/2004 12:16:12 %systemdrive%\users\* Security Level Disallowed Description Prevent software from executing from the users profile area Date last modified 24/01/2008 13:11:40 %systemroot%\profiles\* Security Level Disallowed Description Part of Terminal server security restrictions Date last modified 21/09/2007 10:34:23 %SystemRoot%\repair\* Security Level Disallowed Description System utilities are installed into this directory. Date last modified 21/01/2002 08:26:41 %SystemRoot%\System32\dllcache\* Security Level Disallowed Description Executables located in the Windows directory are cached here in case they are deleted. Date last modified 21/01/2002 08:20:03 %SystemRoot%\temp\* Security Level Disallowed Description Temporary directory used by Offline files. Date last modified 21/01/2002 08:19:04 %SystemRoot%\Temp0 Security Level Disallowed Description Lets Go Date last modified 14/05/2003 12:19:42 %userprofile%\appdata\local\* Security Level Disallowed Description Prevents software from running from within zip archives on vista Date last modified 06/03/2009 09:39:35 %userprofile%\appdata\local\temp\* Security Level Disallowed Description Date last modified 10/05/2012 15:09:44 %userprofile%\local settings\* Security Level Disallowed Description Prevent running exe from local profile when logged off Date last modified 01/07/2004 11:11:39 %userprofile%\Local Settings\Temporary Internet Files\* Security Level Disallowed Description Prevents executables embedded in documents from running Date last modified 23/01/2008 16:46:04 %UserProfile\Local Settings\Temp\*.tmp Security Level Unrestricted Description Allow SIMS to use self-registration for DLLs during installation Date last modified 10/09/2004 10:13:40 \\%userdnsdomain%\sysvol Security Level Unrestricted Description Allows logon scripts to run Date last modified 24/01/2008 09:08:14 C:\WINDOWS\Smart Spender Preferences Security Level Disallowed Description Smart Spender 1.0 Date last modified 14/05/2003 12:21:30 D:\*.mp3 Security Level Disallowed Description Block MP3s on USB Key Date last modified 30/03/2012 10:43:22 E:\*.mp3 Security Level Disallowed Description Block MP3 on E Date last modified 30/03/2012 10:43:35 E:\LaunchU3.exe Security Level Unrestricted Description Date last modified 30/04/2012 14:10:14

Software Restriction Policies/Additional Rules (1.6.1.1); Security Level Unrestricted Description USB Key Unlock Software Date last modified 30/04/2012 14:09:55 (2.5.0.32); Health & Social care; Health & Social care; Health & Social care; Health & Social care Security Level Unrestricted Description Health & Social care 5 Date last modified 30/03/2012 10:43:07 (2.5.0.32); Health & Social care; Health & Social care; Health & Social care; Health & Social care Security Level Unrestricted Description Health & Social care 3 Date last modified 30/03/2012 10:42:26 (2.5.0.32); Health & Social care; Health & Social care; Health & Social care; Health & Social care Security Level Unrestricted Description Health & Social Care 1 Date last modified 30/03/2012 10:42:07 (2.5.0.32); Health & Social care; Health & Social care; Health & Social care; Health & Social care Security Level Unrestricted Description Health & Social care 4 Date last modified 30/03/2012 10:42:45 (2.5.0.32); Health & Social care; Health & Social care; Health & Social care; Health & Social care Security Level Unrestricted Description Health & Social care 2 Date last modified 30/03/2012 10:42:18 AdaptiveReadingScales.exe (1.0.4105.36268); AdaptiveReadingScales.exe; Security Level Unrestricted Description Adaptive Reading Scales Date last modified 27/02/2012 10:13:53 AdaptiveReadingScales.exe (1.0.4105.36268); AdaptiveReadingScales.exe; Security Level Unrestricted Description Adaptive Reading Scales Date last modified 30/03/2012 10:34:18 Become a World Explorer 2.0.20 Security Level Unrestricted Description Become a World Explorer 2.0.20 Date last modified 14/01/2008 04:44:52 CamMenuPlayer.exe (4.0.0.0); CamMenuPlayer; Camtasia MenuMaker Player; Camtasia Studio; TechSmith Corporation Security Level Unrestricted Description Date last modified 08/04/2014 16:15:23 CHS.SIMS.TOOUTLOOK.exe (1.0.0.0); CHS.SIMS.TOOUTLOOK.exe; CHS.SIMS.TOOUTLOOK; CHS.SIMS.TOOUTLOOK; Crickhowell High School Security Level Unrestricted Description CHS SIMS to Outlook Date last modified 30/03/2012 10:44:01 cleanup.exe (1.0.0.3); cleanup; U3 Cleanup Application; U3 Cleanup Application; Security Level Unrestricted Description U3 Cleanup Date last modified 02/05/2012 08:41:13 Clicker 4 Security Level Unrestricted Description Clicker 4 Date last modified 14/01/2008 04:45:04 Control Studio 2 Security Level Unrestricted Description Control Studio 2 Date last modified 14/01/2008 04:44:46 CountDown.exe (3.1.0.4); CountDown; Numbers Game; CSFsoftware Build a Free Website with Web Hosting | Tripod Security Level Unrestricted Description Date last modified 24/06/2013 14:52:03 I Love Science Sampler Security Level Unrestricted Description I Love Science Sampler Date last modified 14/01/2008 04:44:23 Illustrator 10 web publishing Security Level Unrestricted Description Illustrator 10 web publishing Date last modified 14/01/2008 04:44:56 Iscope 4 Security Level Unrestricted Description Iscope 4 Date last modified 14/01/2008 04:46:53 Launcher program (Go.exe) for Oxford University Press 'Oxford Reading Tree Stage 2'. Allows the title to run from local CD as well as from VCD. Security Level Unrestricted Description Launcher program (Go.exe) for Oxford University Press 'Oxford Reading Tree Stage 2'. Allows the title to run from local CD as well as from VCD. Date last modified 14/01/2008 04:46:49 Launcher program (Start.exe) for Sherston Software 'Decimal Games'. Allows the title to run from local CD as well as from VCD. Security Level Unrestricted Description Launcher program (Start.exe) for Sherston Software 'Decimal Games'. Allows the title to run from local CD as well as from VCD. Date last modified 14/01/2008 04:46:08 Launcher program for the Essential Languages range. Allows the title to run from local CD, as well as from VCD. Security Level Unrestricted Description Launcher program for the Essential Languages range. Allows the title to run from local CD, as well as from VCD. Date last modified 14/01/2008 04:46:36 Launcher program for the Essential Languages range. Allows the title to run from local CD, as well as from VCD. Security Level Unrestricted Description Launcher program for the Essential Languages range. Allows the title to run from local CD, as well as from VCD. Date last modified 14/01/2008 04:46:41 Launcher program for the Essential Languages range. Allows the title to run from local CD, as well as from VCD. Security Level Unrestricted Description Launcher program for the Essential Languages range. Allows the title to run from local CD, as well as from VCD. Date last modified 14/01/2008 04:46:22 Launchpad Removal.EXE (1.0.2.32); Launchpad Removal.EXE; Launchpad Removal Program; Launchpad Removal Program; SanDisk Corporation Security Level Unrestricted Description Launchpad Removal Date last modified 02/05/2012 08:41:25 LaunchPad.exe (1.6.1.2); LaunchPad; LaunchPad Application; LaunchPad Application; Security Level Unrestricted Description LaunchPad Date last modified 02/05/2012 08:41:00 LaunchU3.exe (1.6.1.1) Security Level Unrestricted Description Launch U3 Date last modified 02/05/2012 08:17:09 Livewire Security Level Unrestricted Description Livewire Date last modified 14/01/2008 04:44:37 Math-A-Maze.exe (1.6.0.0); Math-A-Maze; Math-A-Maze; Reasonable Games Security Level Unrestricted Description Date last modified 24/06/2013 14:52:23 Memory-Map-Europe-eng.msi; 19154 KB; 22/09/2009 10:27:44 Security Level Unrestricted Description Date last modified 22/05/2014 10:32:36 NTVDM.EXE (6.1.7600.16385); NTVDM.EXE; NTVDM.EXE; Microsoft® Windows® Operating System; Microsoft Corporation Security Level Unrestricted Description NTVDM.EXE (Oregen) Date last modified 21/05/2012 12:49:17 Rawprints Security Level Unrestricted Description Pawprints Date last modified 14/01/2008 04:46:12 PCB Wizard 3 Security Level Unrestricted Description PCB Wizard 3 Date last modified 14/01/2008 04:45:00 PPC.exe (5.2.3790.3959); PPC.exe; PushPrinterConnection application; Microsoft® Windows® Operating System; Microsoft Corporation Security Level Unrestricted Description Date last modified 22/08/2012 17:03:10 Projector.exe (8.0.0.178); Projector; Macromedia Projector; Director 8 Shockwave Studio; Macromedia, Inc. Security Level Unrestricted Description Date last modified 11/03/2014 08:21:42 Projector.exe (8.0.0.178); Projector; Macromedia Projector; Director 8 Shockwave Studio; Macromedia, Inc. Security Level Unrestricted Description Date last modified 11/03/2014 08:21:54 Projector.exe (9.0.0.383); Projector; Macromedia Projector; Director MX; Macromedia, Inc. Security Level Unrestricted Description Date last modified 10/03/2014 13:45:42 ragent.msi; 6386 KB; 13/10/2008 09:14:03 Security Level Unrestricted Description Date last modified 22/05/2014 10:41:51 Read and Write 6.0 Security Level Unrestricted Description Read and Write 6.0 Date last modified 14/01/2008 04:45:51 Read and Write 6.0 - Teacher Security Level Unrestricted Description Read and Write 6.0 - Teacher Date last modified 14/01/2008 04:44:33 Read and Write 6.0 - Tour Security Level Unrestricted Description Read and Write 6.0 - Tour Date last modified 14/01/2008 04:44:28 Robolab Security Level Unrestricted Description Robolab Date last modified 14/01/2008 04:45:56 SAFlashPlayer.exe (6.0.21.0); Macromedia Flash Player 6.0; Macromedia Flash Player 6.0 r21; Shockwave Flash; Macromedia, Inc. Security Level Unrestricted Description Date last modified 24/06/2013 14:53:48 SAFlashPlayer.exe (9.0.115.0); Adobe Flash Player 9.0; Adobe Flash Player 9.0 r115; Shockwave Flash; Adobe Systems, Inc. Security Level Unrestricted Description Think You Know Date last modified 30/03/2012 10:32:38 SAFlashPlayer.exe (9.0.45.0); Adobe Flash Player 9.0; Adobe Flash Player 9.0 r45; Shockwave Flash; Adobe Systems, Inc. Security Level Unrestricted Description Date last modified 24/06/2013 14:51:22 SwFlsh32.exe (5.0.30.0); Flash; Flash Player 5.0 r30; Flash 5.0; Macromedia, Inc. Security Level Unrestricted Description Date last modified 11/03/2014 08:21:33 The Flight Experience Security Level Unrestricted Description The Flight Experience Date last modified 14/01/2008 04:46:17 timer-stopwatch-cl (1.4.0.0); timer-stopwatch-cl; TimeMe's Timer Stopwatch CL; TimeMe's Timer Stopwatch CL; TimeMe Security Level Unrestricted Description Date last modified 24/06/2013 14:51:09 U3AccessGrant.exe (1.6.1.1); U3AccessGrant; U3AccessGrant Application; U3AccessGrant Application; Security Level Unrestricted Description U3AccessGrant Date last modified 02/05/2012 08:41:47 Wellington Square Level 1 Security Level Unrestricted Description Wellington Square Level 1 Date last modified 14/01/2008 04:45:13 Wellington Square Level 2 Security Level Unrestricted Description Wellington Square Level 2 Date last modified 14/01/2008 04:45:27 Wellington Square Level 3 Security Level Unrestricted Description Wellington Square Level 3 Date last modified 14/01/2008 04:45:18 Wellington Square Level 4 Security Level Unrestricted Description Wellington Square Level 4 Date last modified 14/01/2008 04:45:09 Wellington Square Level 5 Security Level Unrestricted Description Wellington Square Level 5 Date last modified 14/01/2008 04:45:22 Wordbar 1.2.8 Security Level Unrestricted Description Wordbar 1.2.8 Date last modified 14/01/2008 04:44:41 WordSrch.exe (2.0.0.2); WordSrch; Wordsearch Generator Software; Wordsearch Creator; CSFsoftware Solutions Security Level Unrestricted Description Date last modified 24/06/2013 14:51:34

Properties [TABLE=class: subtable] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [/TR] [TR] [TD]Allow users to select new root certification authorities (CAs) to trust[/TD] [TD]Enabled[/TD] [/TR] [TR] [TD]Client computers can trust the following certificate stores[/TD] [TD]Third-Party Root Certification Authorities and Enterprise Root Certification Authorities[/TD] [/TR] [TR] [TD]To perform certificate-based authentication of users and computers, CAs must meet the following criteria[/TD] [TD]Registered in Active Directory only[/TD] [/TR] [/TABLE] Software Restriction Policies [TABLE=class: info] [TR] [TD]Enforcement[/TD] [/TR] [TR] [TD] [TABLE=class: subtable3] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [/TR] [TR] [TD]Apply software restriction policies to the following[/TD] [TD]All software files except libraries (such as DLLs)[/TD] [/TR] [TR] [TD]Apply software restriction policies to the following users[/TD] [TD]All users except local administrators[/TD] [/TR] [TR] [TD]When applying software restriction policies[/TD] [TD]Ignore certificate rules[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TD]Designated File Types[/TD] [/TR] [TR] [TD] [TABLE=class: subtable] [TR] [TH]File Extension[/TH] [TH]File Type[/TH] [/TR] [TR] [TD]BAS[/TD] [TD]BAS File[/TD] [/TR] [TR] [TD]BAT[/TD] [TD]Windows Batch File[/TD] [/TR] [TR] [TD]CHM[/TD] [TD]Compiled HTML Help file[/TD] [/TR] [TR] [TD]CMD[/TD] [TD]Windows Command Script[/TD] [/TR] [TR] [TD]COM[/TD] [TD]MS-DOS Application[/TD] [/TR] [TR] [TD]CPL[/TD] [TD]Control panel item[/TD] [/TR] [TR] [TD]CRT[/TD] [TD]Security Certificate[/TD] [/TR] [TR] [TD]EXE[/TD] [TD]Application[/TD] [/TR] [TR] [TD]HLP[/TD] [TD]Help file[/TD] [/TR] [TR] [TD]HTA[/TD] [TD]HTML Application[/TD] [/TR] [TR] [TD]INF[/TD] [TD]Setup Information[/TD] [/TR] [TR] [TD]INS[/TD] [TD]INS File[/TD] [/TR] [TR] [TD]ISP[/TD] [TD]ISP File[/TD] [/TR] [TR] [TD]JS[/TD] [TD]JScript Script File[/TD] [/TR] [TR] [TD]MSC[/TD] [TD]Microsoft Common Console Document[/TD] [/TR] [TR] [TD]MSI[/TD] [TD]Windows Installer Package[/TD] [/TR] [TR] [TD]MSP[/TD] [TD]Windows Installer Patch[/TD] [/TR] [TR] [TD]MST[/TD] [TD]MST File[/TD] [/TR] [TR] [TD]OCX[/TD] [TD]ActiveX control[/TD] [/TR] [TR] [TD]PCD[/TD] [TD]PCD File[/TD] [/TR] [TR] [TD]PIF[/TD] [TD]Shortcut to MS-DOS Program[/TD] [/TR] [TR] [TD]REG[/TD] [TD]Registration Entries[/TD] [/TR] [TR] [TD]SCR[/TD] [TD]Screen saver[/TD] [/TR] [TR] [TD]SHS[/TD] [TD]SHS File[/TD] [/TR] [TR] [TD]VB[/TD] [TD]VB File[/TD] [/TR] [TR] [TD]VBS[/TD] [TD]VBScript Script File[/TD] [/TR] [TR] [TD]WSC[/TD] [TD]Windows Script Component[/TD] [/TR] [/TABLE] [/TD] [/TR] [TR] [TD]Trusted Publishers[/TD] [/TR] [TR] [TD] [TABLE=class: subtable] [TR] [TD]Trusted publisher management[/TD] [TD]Allow all administrators and users to manage user's own Trusted Publishers[/TD] [/TR] [TR] [TD]Certificate verification[/TD] [TD]None[/TD] [/TR] [/TABLE] [/TD] [/TR] [/TABLE] Software Restriction Policies/Security Levels [TABLE=class: info] [TR] [TH]Policy[/TH] [TH]Setting[/TH] [/TR] [TR] [TD]Default Security Level[/TD] [TD]Disallowed[/TD] [/TR] [/TABLE]

Software restriction policies is what you want Using Software Restriction Policies to Protect Against Unauthorized Software You can basically set it to stop anyone but administrators running staff that isn't on the c:\* \\domain\netlogon\.* \\domain\sysvol\.* You can also do hash rules, which in theory will allow unencryption software to run from an external drive but nothing else, never gotten it working properly. We use SRP to only allow c:\windows\*.*, c:\program files*.* and a few other exceptions (like 100)

Unfortunately due to the limitation of impersonating a user on a server ADFS support isn't possible. I've tried and couldn't get it to work, but if someone wants to look at the code they are more than welcome, just let us know how you did it so we can help the community out with it.

Ok, good to know, odd issue.