WinSBS03 Remote Web Workplace permission

[YoungKai]

How do you assign permissions for the access rights to the Remote Web Workplace on Windows SBS 2003? (

http://domain.com/Remote)

I figured that the SBS default security group "Remote Web Workplace Users" controls it. But the funny thing is, the user account "Administrator" is not listed as a member, but is granted access after logging on from the "

http://domain.com/Remote"

page. Furthermore, UserA's not able to gain access, but is granted access after becoming a member of the "Remote Workplace Users" group.

What I'm trying to do is to grant access to a "ALL USERS" group, where the groups of "DepartmentA", "DepartmentB", and "DepartmentC" are members of that "ALL USERS" group, and each user account is a member of one of the departmental groups.

User -> DepartmentX (Universal Security Group) -> ALL USERS (Universal Security Group)

Adding group DepartmentX to the Remote Web Workplace Users group will not work either. But if I add the user to the Remote Web Workplace Users group directly, it gives the user access; this doesn't make sense! Please help!

 

[markdmac]

Admin will have access no matter what.

As I understand it, the RWW feature does not process nested groups. You need to add the users individually.

Considering that you can only have a max of 75 users, this isn't the end of the world.

I hope you find this post helpful.

Regards,

Mark

 

[YoungKai]

Thanks for the timely reply, Mark.
However, as fore-mentioned, even adding DepartmentX (where the user is directly added to this group), it does not give the user access. So, it doesn't process groups at all? Or only won't process nested groups?

After more testing, it's getting more interesting.
*UserA (User account) -> DepartmentA (Universal Security Group) -> Remote Web Workplace Users

When UserB (who's not listed as member of the RWW Users) attemps to logon to RWW, error msg:
The user name or password is incorrect. Verify that CAPS LOCK is not on, and then retype the current user name and password. If you receive this message again, contact your system administrator to ensure that you have the correct permissions to use the Remote Web Workplace.

When UserA attemps to logon to RWW (the following is what happens as described in my first posting as "not gaining access") - UserA receives no error msg, and the browser actually goes to the LOADING page (as if it's granted access), but before the main menu loads, the pages refreshes and loads the login page again (without error msg on the login page as UserB).

 

[YoungKai]

So, is there no way to add groups to Remote Web Workplace Users?

Is the Remote Web Workplace Users security group the only thing that controls the RWW acess?

 

[markdmac]

Remote Web Workplace Users is a group and you are trying to put a grou inside that which is a nested group then. You need to add the users directly.

If you look in the local server security policy you will see that RWW Users is listed in the Access This Computer Remotely security setting. that policy can not process the multiple groups I believe.

I can't locate any docs to back this up, I am only going on my experience here.

I hope you find this post helpful.

Regards,

Mark

 

[58sniper]

I agree with Mark. You can't nest groups here. You can either add them individually to the RWWU group or add other groups in the policy.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)