[THIN] Re: Web Interface and access via groups/permissions

  • From: "Selinger, Stephen" <SSelinger@xxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 22 Jul 2004 09:45:27 -0600

Hi,

You could create a 2nd ICA listener on your Metaframe server using port
1495 for example. Set permissions on this listener to only allow "remote
access" users to logon using this listener. Then redirect your external
Web Interface site to this listener.  This way if users are not in the
remote access group they can not log in remotely. This makes it really
easy to determine who had remote access. You can also further restrict
what users can do when they connect via external devices. 

Stephen

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Pardee, Michael P.
Sent: July 22, 2004 9:24 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Web Interface and access via groups/permissions


I apologize if this has been discussed, but I have not found the magic
bullet yet.

We rolled out Web Interface to our users and they went absolutely nuts.
They love it.  Actually told me it's one of the best things my group has
done on the last 10 years.  I "think" that may be a compliment.

HR, however, has just come up with a reason to give us heartburn over
this - hourly employees.  We never saw it coming.  They are concerned
about hourly employees working too many hours.  Apparently they can come
back and take the company to court for payment for time they worked.  I
never knew about that piece before, but I definitely understand it now.

We have 2 Web Interface environments here; an internal one and an
external one that also uses CSG.  This is all version 2 by the way.

Is there a way to either give permissions to users that need it or do a
deny for folks that shouldn't have it?  This will appease the HR folks
and we can continue to move forward with our rollout.


> Michael Pardee
Mailto:mpardee@xxxxxxxx <Mailto:mpardee@xxxxxxxx> 

Email Confidentiality Notice: The information contained in this
transmission is confidential, proprietary or privileged and may be
subject to protection under the law, including the Health Insurance
Portability and Accountability Act (HIPAA).  The message is intended for
the sole use of the individual or entity to whom it is addressed.  If
you are not the intended recipient, you are notified that any use,
distribution or copying of the message is strictly prohibited and may
subject you to criminal or civil penalties.  If you received this
transmission in error, please contact the sender immediately by replying
to this email and delete the material from any computer.
********************************************************
This weeks sponsor Emergent Online Thinssentials Utilities Using the
latest software, hardware, networking technologies, proven technical
expertise, proprietary software and best practices, EOL provides
custom-tailored solutions for each client's mission and specific goals.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online Thinssentials Utilities
Using the latest software, hardware, networking technologies, proven technical 
expertise, proprietary software and best practices, EOL provides 
custom-tailored solutions for each client?s mission and specific goals.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: