Solved

Intranet security

Posted on 2000-02-23
8
156 Views
Last Modified: 2013-12-24
How can I implement a user ID and password for letting people enter a particular section depending on their logon and pwd?

I give all the points I have left...
0
Comment
Question by:pmelkebeke
  • 4
  • 4
8 Comments
 
LVL 1

Expert Comment

by:mgoergen
ID: 2549666
The best way to create a password protected section is to set it up on the webserver.

So question is which webserver do you have?
0
 

Author Comment

by:pmelkebeke
ID: 2549728
I'm using Microsoft's IIS with the FP extensions installed.  What I really would like is the following:
I want to implement this for different departments.  So if a user from deptA logs in he will go straight to the pages concerning deptA and will not be able to see deptB.  If a user from deptB logs in we have the same thing for deptB and no acces to deptA pages.  And this also needs to be done for deptC, deptE...  I would like to use a simple acces database to store the username, password and department and use this database for granting or denying acces.
0
 
LVL 1

Accepted Solution

by:
mgoergen earned 70 total points
ID: 2549835
Do all users have a valid NT Login?

You have two options.

1.
You can protect the files via a script login. Not very professinal and not very secure. Also it is not so nice to handle it. For example who will you protect files like word documents etc. if a user knows it and simply download it.

2.
Create two domains called depA and depB for example. make each user from depa  member to his domain and the same for depB

create two directories called depa and depb under the root dir of the intranet.

Have a look at the IIS there is an option to password protect a dir and to use valid users. for Dir depa choose all member of the domain depa and the same with depB

After that all files are protected by your server and you don´t have to take care about anything else.

Comment
Unfortunatly IIS could not use a database for checking users. For example Apache Webserver could use it :-)



0
 

Author Comment

by:pmelkebeke
ID: 2550031
OK, but what do we do with users that should have acces to depA and depB?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:pmelkebeke
ID: 2550038
Isn't there anyway to create a login page in FP and from there have the users checked and directed to the section they have acces to?
0
 
LVL 1

Expert Comment

by:mgoergen
ID: 2550045
simply add them in both domains so they will have access to both directories

So you see it will be easy to handle the access to the dir. via the domain concept of ms
0
 
LVL 1

Expert Comment

by:mgoergen
ID: 2550083
sure you can create such a page. But who will you manage for example protection for seperate files like exel sheets, pdf´s and so on???

So be sure that this is the best solution, even notice that it is move one time to set it all up, but after that everything is easy and no great problem to do.
0
 

Author Comment

by:pmelkebeke
ID: 2550114
Well I'm not very familiar with the domain thing and WIndows NT, so I'd like to try it from within FP with an Acces database.  Can you help?
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Turn A Profile Picture Into A Cartoon Using Photoshop And Illustrator This tutorial will teach you how to make a cartoon style image out of a regular picture. I have tried to keep the tutorial as simple as possible. I used Adobe CS4 for this tuto…
When setting up new project requests for our site, one of the most powerful tools our team has available to use is Axure (http://www.axure.com/). It’s a tool for creating software and web prototypes that can function and interact as if it were the a…
The purpose of this video is to demonstrate how to automatically show related posts at the bottom of a blog post in WordPress. This will be demonstrated using a Windows 8 PC. Plugin “Yet Another Related Posts Plugin” will be used. Go to your…
The purpose of this video is to demonstrate how to add AdSense Ads to a WordPress Website, and how to set up WordPress to automatically place Ads in Sidebars. This will be demonstrated using a Windows 8 PC. Log into your AdSense account. : Cli…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now