Prevent all the users from access ECM web app on premise

ECM
1

Anyone can help to tell us what is the efficient and safe way to prevent all the users from access ECM web app on premise? Thanks.

2

Don’t give them logons

3

Thank you. I am wondering if we can do something on the ECM app server to prevent all the users from accessing.

4

Can you be more specific? I don’t want to assume what you mean.

Do you mean -
No ECM access while the person is on the local network?
Only use ECM via ERP document management?
What about remote access via the ECM App?

If it read it like the first reason, then you could manipulate IIS using IP address restrictions and include the local server and Kinetic/ERP App server(s).

I’ve never done this, but it should theoretically work.

image
image696×394 32.3 KB

5

I means preventing the ECM users from accessing for some time during ECM maintenance.

6

I found this, although once you start the ECM Server Setup msi to do the update/upgrade, it disables access to the site.

Is it possible to make part of a site on IIS only viewable from localhost ??
http://stackoverflow.com/questions/270284/ddg#22575734

For some one doing it in IIS 8 / Windows 2012

  1. In Server Manager, go to Manage, Add Roles and Features, Next, Next (get to Server Roles), scroll down to Web Server (IIS), expand that row, then expand Web Server, and finally expand Security. Make sure that IP and Domain Restrictions are installed.

  2. In IIS Manager, drill down to the folder that you want to protect and left click select it. In the Features View of that folder select IP and Domain Restrictions In Actions choose Edit Feature Settings. Change 'Access for unspecified clients:' to 'Deny' then OK.

  3. Finally go to 'Add Allow Entry' In the Actions menu. Type in the Specific IP address of your server.

Now only requests coming from your server will be allowed access. Or any server that shares that IP address. So in a small network, the office could share the IP address between all of the PCs in that offices, so all of those PCs could access that folder.

Last but not least is to remember that if your network has a dynamic IP address, then if that IP changes, you will expose your blog admin folder to whoever is using that IP now. Also, everyone on that new IP address will lose access to your that folder…

7

Thank you Mike. Can one just stops the application pool in IIS. No one can access.

8

I am pretty sure the upgrade process stops the services and IIS during the process since it cannot upgrade files in use.

9

You can stop the app pool manually, but pretty sure the installer/upgrade program will fail if the app pool isn’t running when it queries the ECM services for license and configuration details during its first few steps.