Home | Download | Demo | Feature list | Premium users | Support | Knowledgebase
How to fix WMI Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
The network path was not found - The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
How to configure Windows Vista clients.
How to configure the windows firewall using group policies.
   
Welcome Guest Search | Active Topics | Members | Log In | Register

secure access to the Lansweeper web console... Options
TelhioCU
Posted: Thursday, October 09, 2008 2:57:57 PM

Rank: Premium user
Groups: Member , Premium Users

Joined: 10/6/2008
Posts: 16
Location: Columbus, Ohio
I have tried to apply the changes to the web.config to limit access to the Lansweeper web console, but it either prevents everyone, or doesn't work at all.

Can you look at my config and tell me where I am missing something?

note: The group name has a space in it, and is a total of 22 characters including the space if that has a bearing on anything

These settings don't work:

</appSettings>
<system.web>
<authentication mode="Windows"/>
<identity impersonate="true" />
<authorization>
<allow roles=""domain\11111111111 2222222222"" />
<deny users="*" />
</authorization>
<compilation debug="true" strict="false" explicit="true">
<assemblies>
<add assembly="System.Web.Extensions, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add assembly="System.Design, Version=2.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A"/>
<add assembly="System.Web.Extensions.Design, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add assembly="System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
</assemblies>

This allows everyone to access:

</appSettings>
<system.web>

<compilation debug="true" strict="false" explicit="true">
<assemblies>
<add assembly="System.Web.Extensions, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add assembly="System.Design, Version=2.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A"/>
<add assembly="System.Web.Extensions.Design, Version=1.0.61025.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add assembly="System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
</assemblies>


Additionally, if I don't want/can't allow only the members of one group, how do I allow just a string of users?

<allow users="username,username,username" /> - would this be correct?

Thanks,

Tim
shamus
Posted: Thursday, October 09, 2008 3:06:01 PM
Rank: Freeware user
Groups: Member

Joined: 10/8/2008
Posts: 8
Location: Scotland
Why not disable anonymous access in IIS and change it to Integrated Windows authentication, then you add/remove users in windows security on the root of the lansweeper website folder.
TelhioCU
Posted: Thursday, October 09, 2008 3:16:49 PM

Rank: Premium user
Groups: Member , Premium Users

Joined: 10/6/2008
Posts: 16
Location: Columbus, Ohio
Obviously a good option.

Thanks for the info.

However, as per the documentation included with the Lansweeper product this option is available. I would like to leverage the capabilities of the product.

Thanks again,

TCU
TelhioCU
Posted: Friday, October 10, 2008 2:14:04 PM

Rank: Premium user
Groups: Member , Premium Users

Joined: 10/6/2008
Posts: 16
Location: Columbus, Ohio
Maybe I am missing something, but if I remove the "localmachine/users" read access:

- I can't get to the page unless I am the appropriate (as I configured it) user/group.
- If I am a member of the allowed group I can get to the site BUT I cannot drill down into the rest of the web console pages without user access

Keep getting "Server Application Unavailable"

Thanks,

TCU
TelhioCU
Posted: Tuesday, October 14, 2008 8:21:55 PM

Rank: Premium user
Groups: Member , Premium Users

Joined: 10/6/2008
Posts: 16
Location: Columbus, Ohio
This is still a hot issue for us. If there are other ideas/recommendations we would appreciate more input.

Thanks,

TCU
Users browsing this topic
Guest


Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.


Copyright © 2003-2006 Yet Another Forum.net. All rights reserved.

   
Quick links: Download - Premium users - Support 
Copyright 2004 - 2008 © Geert Moernaut - Hemoco bvba - All rights reserved