Console 6.5 wierdness
Updated: 21 May 2010 | 8 comments
This issue has been solved. See solution.
Somehow it looks like the permissions are getting screwed up in the console. Up until recently, when a person tried to log in to the console they would run it under their currently logged in account... now when someone that has access logs in, it shows the service account at the top instead of the logged in user.
Does anyone know how I cna resolve this because it is making me scratch my head to be sure!
Thanks in advance.
discussion Filed Under:
Comments
Windows User Groups
Look at what the group membership is. Are your users in the NS admin or NS users group on the NS?
Check your web.config
It sounds like identity impersonate is turned on in the web config file. If it's console 6.5, go to <DriveLetter>:\Program Files\Altiris\CustomConsole\Web\web.config and comment out the identitiy impersonate line.
It indeed was enabled ... do
It indeed was enabled ... do I need to restart the IIS services I assume for this to take effect?
Are you talking the local
Are you talking the local groups to the server or groups in the NS itself?
I have some in the group for ns admins and some in the ns users. When a admin logs in should it not log in as their account and not the service account?
It was doing that it seemed like a week or so ago as I had some favorites stored, now those are gone. This is really wierd.
Okay I have that commented
Okay I have that commented out, I restarted the IIS service ... now I get this when I try and start a console session:
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'
More IIS settings
Open IIS manager, and go to the properties of the Default Web Page ->Altiris->Console. In Directory Security, hit edit under Authentication and Access control, and make sure Anyonmous access is off, and that both basic identification and Integrated Authentication are on. Restart IIS just in case, although I don't think it needs it.
that got it. Not sure how it
that got it. Not sure how it got reset or changed to allow anonymous .. but it was set. I changed it and all is glorious.
Thanks.
Excellent
I'm not sure how it happened to me once, but I'm I think it was for troubleshooting purposes and I never went back and fixed it. After I got deeper into security roles I went back and changed the settings (this was about a year ago). Glad I still remembered! Enjoy!
Would you like to reply?
Login or Register to post your comment.