Navigation:  Web Reports >

Authentication

Since the EventSentry web reports will in most cases contain security-sensitive information, access to the web reports needs to be restricted. You can restrict access to the web reports in two ways:

Built-In Authentication

The built-in authentication allows you to create users and groups and assign granular permissions to them. This makes it possible to give unprivileged users access to the web reports by only giving them access to pages that do not contain sensitive information. Additionally, permissions can be assigned to computer objects, so that users only have access to information generated by certain computers. This makes it easy and secure to setup a customer portal for providers of hosted monitoring services.

Furthermore, the built-in authentication allows users to maintain their customized settings for the web reports, which will be retained for future sessions.

NTFS Permissions

When the Built-In Authentication is disabled then you can restrict access to the web reports by adjusting the NTFS permissions of the files in the Web sub folder of the EventSentry installation directory. The result is that only users that have access to the files will have access to the web reports. See Web Reports for more information.

If the built-in authentication is currently enabled, then either disable_anonymous_access_iis5_iis6.cmd or disable_anonymous_access_iis7.cmd (depending on the OS) will need to be run to set the file permissions appropriately. Both of these files are located in the IIS sub directory of the EventSentry installation.