This post is more than 5 years old
6 Posts
0
189289
January 30th, 2014 12:00
Limiting who can access the Web Portal
Is there a way I can put a restriction on who can and can't access the web portal. I work at a doctors office, I want the doctors to be able to access their terminal server sessions from home, however I do not want the office staff to have the ability to do this. Anyone know how I would go about setting up those restrictions? I'm currently running Version 7.6
No Events found!
gregpolen
92 Posts
1
January 30th, 2014 14:00
Make two Manage Applications.
Make two AD groups, one for Doctors and one for all others.
Assigne each group to a different Managed Application.
Make a Device Address Target for the subnet IP range of the office and apply this to the Manage Application for office staff.
Now when the Doctors login they get their own icon for any network location they are at and the office staff only get an icon when in the office network.
-Greg
Kelly Craig
44 Posts
0
January 30th, 2014 14:00
Have you considered using IIS security to restrict access? such as client side certificates?
http://technet.microsoft.com/en-us/library/cc753983(v=WS.10).aspx
Kelly
sedenton-vwcent
6 Posts
0
January 30th, 2014 14:00
I have considered this, however. The doctors use tons of different computers in a bunch of different locations. I don’t want them to have to install certificated on each new device they use to login. I just want to block certain users from logging into the quest online web interface.
DELL-Andrew W1
378 Posts
0
January 31st, 2014 10:00
Hi Greg,
Nice approach
Stacy, are you happy with that?
DELL-Marc Z
30 Posts
0
January 31st, 2014 16:00
Nice solution Greg.
You could also use the advanced target ‘Web Access Site' condition to exclude website access for Office Workers like:
Assigning this single target to the published desktop should do the trick.
If you wanted to only allow apps to show up in Web Access, or a particular Web Access site you can change the condition from ‘is not equal to’ to ‘is equal to’.
Marc
sedenton-vwcent
6 Posts
0
January 31st, 2014 16:00
Yes, that approach was perfect. Thank you Greg. We have accomplished what we were looking for.