This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Lockdown web interface

When installing the web interface there are three version of the site.  Admin, Helpdesk and Self Service.  I want to ensure I don't allow access to regular users to the Admin and Helpdesk interface.  Is there a way to lockdown the interface to a group?

Parents
  • my suggestion.

    In general. There is no need to luck down AR WI. AR WI is just a client and AR Delegation Roles is supposed to lock the security for any client (AR MMC, WI, scripts) anyway.

    AR WI is Itranet only and *not* exposed to Internet.

    IIS security. AR WI ApplPool runs under IIS server default local IIS account account with limited local rights.

    You may additionally ACL IIS folder with AR WI files allowing Read for dedicated AD\ARS_Users_Group - the standard way to lock any IIS website.

Reply
  • my suggestion.

    In general. There is no need to luck down AR WI. AR WI is just a client and AR Delegation Roles is supposed to lock the security for any client (AR MMC, WI, scripts) anyway.

    AR WI is Itranet only and *not* exposed to Internet.

    IIS security. AR WI ApplPool runs under IIS server default local IIS account account with limited local rights.

    You may additionally ACL IIS folder with AR WI files allowing Read for dedicated AD\ARS_Users_Group - the standard way to lock any IIS website.

Children