Skip to main content
Nintex Community Menu Bar

How to restrict AD groups access to the K2 Smartforms Designer using Internet Information Services (IIS)

  • April 17, 2016
  • 0 replies
  • 8 views

Forum|alt.badge.img+16


 

Symptoms

 


Need help to implement restricting AD group access to the K2 Smartforms Designer. The steps provided by K2 documentation to block access at IIS level don’t seem to be working for AD groups.
http://help.k2.com/onlinehelp/k2smartforms/UserGuide/current/default.htm_RestrictAccessToSmartFormsDesigner_IIS.htm

 

 

Diagnoses

 


NA
 

 

Resolution

The issue has been logged. The work around is to use GroupSID instead of Group Name when setting up permission for IIS authorization rule (i.e Install AD module for Powershell and run get-ADGroup -Identity "Group_name" to get GroupSID value).

Alternatively, you can use this Powershell script without installing AD module to get GroupSID value.
$objUser = New-Object System.Security.Principal.NTAccount("domain_name_here", "group_name_here")
$strSID = $objUser.Translate([System.Security.Principal.SecurityIdentifier])
$strSID.Value