Symptoms

Need help to implement restricting AD group access to the K2 Smartforms Designer. The steps provided by K2 documentation to block access at IIS level don’t seem to be working for AD groups.
http://help.k2.com/onlinehelp/k2smartforms/UserGuide/current/default.htm_RestrictAccessToSmartFormsDesigner_IIS.htm

 

Diagnoses

NA
 

Resolution

The issue has been logged. The work around is to use GroupSID instead of Group Name when setting up permission for IIS authorization rule (i.e Install AD module for Powershell and run get-ADGroup -Identity "Group_name" to get GroupSID value).

Alternatively, you can use this Powershell script without installing AD module to get GroupSID value.
$objUser = New-Object System.Security.Principal.NTAccount("domain_name_here", "group_name_here")
$strSID = $objUser.Translate(rSystem.Security.Principal.SecurityIdentifier])
$strSID.Value