Account Reset Console Administration Guide Revision: May 31, 2007 – For Software Version 4.5.x Lieberman Software Corporation - 1900 Ave of the Stars, Suite 425, Los Angeles, CA 90067 Voice: 800.829.6263 (USA/Canada) Voice: (01) 310.550.8575 (Worldwide) Fax: (01) 310.550.1152 (Worldwide) Web: www.liebsoft.com Email: support@liebsoft.
Table of Contents Copyright Notice....................................................................................................................... 1 License Agreement .................................................................................................................. 2 Country of Origin ...................................................................................................................... 3 Limited Warranty .................................................................
Scheduling tasks [Advanced] .............................................................................................. 27 Configuring licensing [Advanced] ........................................................................................ 30 Changing Your Own Password............................................................................................... 31 Overview .............................................................................................................................
Adding Reports ................................................................................................................... 39 Running Reports Immediately ............................................................................................. 40 Editing Report Settings........................................................................................................ 40 Viewing Management Reports................................................................................................
Adding Access Rights ......................................................................................................... 53 Viewing or Deleting Existing Access Rights......................................................................... 53 Set Account Reset Features................................................................................................... 54 Overview .............................................................................................................................
Overview ............................................................................................................................. 65 Viewing Available Data Sources.......................................................................................... 65 Adding a Data Source ......................................................................................................... 66 Editing a Data Source ..................................................................................................
Setting the Default Domain .............................................................................................. 76 Application Security................................................................................................................ 77 Overview ............................................................................................................................. 77 Managing Application Security ...................................................................................
Copyright Notice Copyright © 2005-2007 Lieberman Software Corporation. All rights reserved. The software contains proprietary information of Lieberman Software Corporation; it is provided under a license agreement containing restrictions on use and disclosure and is also protected by copyright law. Reverse engineering of the software is prohibited. Due to continued product development this information may change without notice.
License Agreement This is a legal and binding contract between you, the end user, and Lieberman Software Corporation. By using this software, you agree to be bound by the terms of this agreement. If you do not agree to the terms of this agreement, you should return the software and documentation as well as all accompanying items promptly for a refund. 1.
Country of Origin This software was developed entirely in the United States of America.
Limited Warranty The media (optional) and manual that make up this software are warranted by Lieberman Software Corporation to be free of defects in materials and workmanship for a period of 30days from the date of your purchase. If you notify us within the warranty period of such defects in material and workmanship, we will replace the defective manual or media.
Pre-Usage Considerations Please ensure that you have completed all steps in the appropriate installation checklist before you begin attempting to manage the Account Reset Console. Installation checklists can be found in the accompanying document, ArcWeb Install Guide. If you have any questions or concerns about this program’s installation or operation before or after it has been installed, please contact our support department for assistance.
Welcome to the Account Reset Console Thanks for using the Account Reset Console! Thank you for using Lieberman Software’s Account Reset Console! The Account Reset Console, or “ARCWeb” for short, provides your Help Desk with the ability to reset domain account passwords/account flags, and allows users to reset their own forgotten or expiring passwords in a fully audited and delegated manner via any web browser.
1. Corporate Logo – your corporate logo can be put here instead of the Lieberman Software logo. 2. Tagline – your own tagline can be used here. In addition, nearly all colors in the Account Reset Console can be changed to match your own corporate identity. 3. Logged-in User: the user currently logged into the system at this web browser. 4. Logout link: Logs the user out of the system. 5. Main menu: Each link on the main menu represents a separate area of activity.
Once you log into the Account Reset Console you should see a series of top-level menu options which look similar to the ones below. If you do not see all the menus, you have logged in with an account that is not a member of the initial administrative group, and the Account Reset Console is restricting your access to certain parts of the interface.
The top-level menus represent different parts of the ARCWeb product: • • • • • Accounts – this menu contains the direct account manipulation pages. Ordinary users use these pages to reset their own passwords and configure their answers for identity verification. Help desk users use these pages to reset other users’ accounts. Scheduling/Reporting – this menu contains pages for viewing the access and reset logs, and for scheduling tasks and viewing the reports generated by these tasks.
Configuring the Account Reset Console Overview Once you have installed and logged into the Account Reset Console, there are a few steps you will need to take to configure the tool to function properly with your network. You can use the tool at any point, but properly configuring it will unlock the full functionality of the product and allow you to explore every feature it offers. We recommend that you begin working with the Account Reset Console by: 1. 2. 3. 4. 5. 6. 7.
Add your groups by entering their group name (and domain, if appropriate) into the entry fields and clicking “Add SuperUsers” for each one. Granting super-user permissions to a group allows them to access any component of the Account Reset Console interface. For more information on super-users, see the dedicated “Super-User Configuration” section later in this document.
Configuring managed domains Once you have entered your selected super-user groups it is time to configure the specific domains that the Account Reset Console will be able to manage. Domain configurations can be found under the “Configuration” main menu item, in the “Domains” side menu tab. The Account Reset Console will allow you to select (enable) any domain for which your COM+ account has administrator privileges: You can see any status error messages by clicking the [details] link for a given domain.
Setting up data sources and logging Account Reset Console 4.X requires Microsoft MSDE/SQL Express or SQL Server 2000/2005 or later for logging and user verification purposes. Lieberman Software Corporation recommends Microsoft SQL Server 2000 or 2005 as the optimal solution for these purposes. The Account Reset Console is designed to use a variety of databases for logging and verification purposes. The “Data Sources” page is the single management point for configuring these databases.
You can select any data source as your log destination using the dropdown box on this page. The Account Reset Console will reject your choice if you select a non-SQL Server data source. If you select a SQL Server data source without extant tables, ARCWeb will be able to create the appropriate database tables for you. You can find information on the database table requirements and setting alternate databases in the “Logging Configuration” section later in this document.
Account Reset Features Page 15 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
The Account Reset features allow you to configure what operations Help Desk personnel can perform on accounts they are resetting. By default, the options should allow all actions on the account. The settings on this page directly affect the available controls on the “Reset User Account” page seen by Help Desk personnel. For evaluating the product the default options should suffice.
Configuring email If you want the Account Reset Console to be able to notify users via email of account or password resets, or to be able to email administrators and managers of scheduled task completion or failure, you will need to configure the email system. You can find the email configuration page under the “Management” main menu item and the “Configure Email Settings” side menu tab. You will need to use appropriate settings for your network and mail server configuration.
Setting up group permissions The final step before you begin using the basic features of the Account Reset Console is to delegate login and account reset permissions to your chosen groups. ARCWeb uses two types of account permission, Program Access and Group Access. Program Access allows you to delegate login rights and interface level privileges to groups; Group Access allows you to delegate the authority to reset specific other users’ accounts to groups.
• • • • Allow Web Logon: Allows users to log onto the Account Reset Console to reset their own passwords or configure verification answers. Allow Reset of Other Users’ Accounts: Allows users to reset other accounts if they have been granted permissions for the specific target user in the “Group Access” page. See the next section for more information. View Console Logs and Task Reports: Allows users to view the Account Reset Console’s activity logs and schedule and view tasks and reports.
Only by setting BOTH the “Allow Reset of Other Users’ Accounts” program access level AND the appropriate group access rule will a help desk user be able to reset another user’s account. For more information, please see the “Set Group Access Rights” section later in this document. Viewing logs You can view the logs generated by the Account Reset Console in the “Scheduling/Reporting” main menu section, under the “View Logs” side menu tab.
You will begin configuring the verification system at the “Verification” side menu tab in the “Configuration” main menu section. The Account Reset Console will configure three initial questions for you by default. You can add or remove these questions to/from the list of required questions by clicking the [Add] and [Remove] links. By default on installation, all three questions are required. You can add more questions by entering the question text at the bottom of the screen and clicking “Add Question”.
The Account Reset Console allows you to design and use your own SQL queries, and thus configure your verification system to access any database you may already be using for data storage. This offers you unparalleled flexibility in verification options.
to reset/unlock their accounts without requiring access to a browser or help desk personnel. For further information or to download, please visit the Lieberman Software web site at http://www.liebsoft.com and visit the Account Reset Console pages.
The new button at the bottom of the login page allows users to answer the selected questions to verify their identity and reset their passwords. You may also notice that the “Set Up My Identity” page becomes available under the “Accounts” main menu item, allowing users to enter their own answers into the database for those questions which allow it: For more information on configuring user identity information, see “Identity Configuration”, later in this document.
When initially evaluating the product, the defaults should suffice. The default character set is designed to protect MS Access and SQL Server databases. For more information on data security, see the “Manage Application Security” section later in this document. Note that after the last character in the allowed character set screen that there is a space. This is by design and is there to allow users to have spaces in their verification question answers.
All colors should be in hexadecimal RGB format. Thus, red would be FF0000 and green 00FF00. All “0” characters should be zeros, not o’s. For more information on changing the application’s appearance, see “Appearance” later in this document.
Setting up the mobile site [Advanced] The Account Reset Console’s /Mobile site allows you to access any feature of the application from your mobile device with an optimized download size and screen layout. You can change the ARCWeb mobile behavior under the “Management” main menu and the “Mobile Settings” side menu tab. You will need to determine your selected mobile device’s width in pixels to view the application.
The list of active and inactive tasks is visible. Adding a new task to the inactive list is as simple as entering the task name and type and clicking “Add Task”. You can activate/deactivate tasks by clicking the [Activate] and [Deactivate] links next to the task name.
Page 29 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
In the edit screen you can change the interval, which groups and users it scans for, and what actions to take. You can find more information on scheduling tasks in the “Scheduling Tasks and Reports” section later in this document. Once your scheduled tasks begin to run you will be able to view the reports they generate by clicking the “View Task Results” side menu tab under the “Scheduling/Reporting” main menu section.
Changing Your Own Password Overview The Account Reset Console can allow users to reset their own passwords. Self-service password change is located under the “Accounts” menu item, in the “Change My Password” tab. Users with “Allow Web Logon” privileges can reset their own passwords if the Account Reset Console is configured to allow them to do so. Changing Your Password To change your own password, you will need to enter the new password twice.
Resetting User Accounts Overview The Account Reset Console can allow users to reset other user accounts. User account reset is located under the “Accounts” menu item, in the “Reset User Account” tab. Users with “Allow Reset of Other Users’ Accounts” privileges can reset other users’ accounts, provided that they have permission to reset the appropriate user groups. ARCWeb administrators can grant help desk users the appropriate permissions to reset other users’ accounts.
Account Reset Options Not all options will necessarily be available, depending on how your system administrators have configured the Account Reset Console. However, the available options will allow you to reset specific components of user accounts. • • • • Reset the account password – check this box to reset the account password. Once you check this box, the “Password” and “Password (again)” fields will be enabled. You must enter the new password twice to ensure that you have made no typographical errors.
To look up user information, enter the user’s username and domain and click “Look Up Answers”. The user accounts you are permitted to view may be restricted. The user’s identity information will be displayed so that the help desk user can confirm their identity by having the user answer each question. Once the help desk user is done, they can click “Reset User Account Now” to automatically take them to the Account Reset screen and automatically fill in the user’s domain and username.
Setting Up Identity Information If the Account Reset Console is configured to allow users to verify their identity, and there are questions that the users can supply answers for, users will be given the opportunity to answer these questions on this page. Each user-configurable question will be listed. To change your answers, simply enter the new value into the “Answer” box below the appropriate question and click “Save Verification Info”.
The Account Reset Console protects the data sources accessed by the verification system against intrusion by limiting the characters you can enter into the answer fields. In this scenario, you may see a message such as the one below. You will have to use a different answer to proceed. Log Viewing Overview The Account Reset Console logs all access attempts and account actions, recording the user name, domain, and action taken, including success or failure.
The Account Reset Console will display logs from the current logfile. Any logging information saved in a different log data source will not be displayed. There are two separate logs that the Account Reset Console can display. The first is the Access Log, which contains information on which users have accessed (logged onto) the Account Reset Console.
Viewing the Action Log To view the Action Log, select “Action Log”, enter the desired range of dates and user account, and click “Display Log”. The Account Reset Console records the time that the access was attempted, the IP address from which the user attempted to log onto the system, the action requested, the user requesting the action, the target of the action, and the result.
Management reports are divided into two classes: “Active” and “Inactive” reports. Active reports are in the queue to be run when the task process runs; Inactive reports will never be run unless they are transferred into the “Active” list. You can switch a task from Inactive to Active status by clicking the [Activate] link next to its name. Similarly, you can switch a task from Active to Inactive status by clicking on the [Deactivate] link next to its name.
• “Account inactivity” – Select this report type to search for accounts which have been inactive (have not logged in) for the specified number of days. Any time a login is recorded on any domain controller that ARC is able to contact, the timestamp will be reset. However, if a domain controller goes offline, this information may be inaccurate, as the timestamps stored on that domain controller will no longer be available.
• • • • • • • • • • Task Name – the name you use to refer to the report task. This name will be stored in the reports database so you can find the task output. Task runs on – select the days of the week on which the task will run. Last Run – the last time that the task was run, and the status of the run (success or failure). Target Groups – the list of groups that the task will scan when run. You can add a new group by entering a groupname into the box and clicking “Add Group”.
Report Viewing Options Scheduled task reports are saved in the current Account Reset Console log database. Any reports saved to a previous log database will not be available. The Account Reset Console will display the most recent runs of any management report at the top of the page, and a list of all scheduled management reports at the bottom of the page.
The report shows the name of the task and the date of the run, and then displays a list of the users found, the actions taken, and the result of the action. You can also click on the name of a report task at the bottom of the report listing to see a list of all runs of that report in the database: From this listing you can select a single run and view the results as above.
Creating and Viewing Account Tasks The scheduled account tasks that are currently saved are displayed in a table on the main scheduled tasks screen, as shown below: Scheduled tasks are divided into two classes: “Active” and “Inactive” tasks. Active tasks are in the queue to be run when the task process runs; Inactive tasks will never be run unless they are transferred into the “Active” list. You can switch a task from Inactive to Active status by clicking the [Activate] link next to its name.
• • • “Password expiration” – Select this task type to search for accounts with passwords due to expire in the specified number of days. This scan searches for accounts whose passwords will be expired by the primary domain controller’s password policy. The date used for calculating the time until expiration in the task is drawn from the clock on the machine running ARCWeb, NOT the domain controller.
Page 46 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
• • • • • • • • • • • Task Name – the name you use to refer to the task. This name will be stored in the reports database so you can find the task output. Task runs on – select the days of the week on which the task will run. Last Run – the last time that the task was run, and the status of the run (success or failure). Target Groups – the list of groups that the task will scan when run. You can add a new group by entering a group name into the box and clicking “Add Group”.
Report viewing is located under the “Scheduling/Reporting” menu item, in the “View Task Results” tab. Reports can be viewed by users with “Manage All Web Access Controls” privileges. Report Viewing Options Scheduled task reports are saved in the current Account Reset Console log database. Any reports saved to a previous log database will not be available.
The report shows the name of the task and the date of the run, a description of the task, a summary, and then a list of the users found, the actions taken, and the result of the action. You can also click on the name of a scheduled task at the bottom of the report listing to see a list of all runs of that task in the database: From this listing you can select a single run and view the results as above.
Set Program Access Rights Overview User groups can be allowed to login as normal users, allowed to reset other user accounts, and/or allowed to manage the Account Reset Console. Program access rights are located under the “Management” menu item, in the “Program Access” tab. Program access rights can be managed by users with “Manage All Web Access Controls” privileges. Program Access Levels Program access rights are designated at the domain or local group level, not by individual user account name.
• • • • Allow Web Logon – This access right allows members of the specified group to log onto the Account Reset Console through the web interface. o If the Account Reset Console is configured to allow them to change their own passwords, users will have this option once they log in.
Set Group Access Rights Overview User groups that are allowed to reset other user accounts are strictly limited to resetting only accounts which they are permitted to affect. Group access rights are located under the “Management” menu item, in the “Group Access” tab. Group access rights can be managed by users with “Manage All Web Access Controls” privileges. Group Access Rights Group access rights are designated at the domain or local group level, not by individual user account name.
members of the “can reset” group are permitted to reset accounts of users in the “can be reset“ group. It is important to note that there are two different types of Group Access Rights: • • Reset Password – Granting an Administrative Group Reset Password rights allows the members of the Administrative Group to reset the accounts and passwords of users that are members of the Managed Group.
Set Account Reset Features Overview The Account Reset Console can be configured to automatically change account flags during account reset or to allow the resetting user to select which flags to change. It can also be configured to email users account password change notifications. Account reset settings are located under the “Management” menu item, in the “Account Reset Features” tab. Account reset settings can be managed by users with “Manage All Web Access Controls” privileges.
Page 55 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
• • • • • • • • Reset Password through Account Reset Console – check this box to allow user passwords to be reset during account reset. If this box is not checked, help-desk users will not be given the option to reset the password during account reset. Allow Help Desk to view user identity information – check this box to allow access to the “Look Up User Data” menu item. This allows members of Administrative Groups to view the identity verification answers for members of Managed Groups.
Password Change Options You can change password change options by selecting the appropriate values and clicking the “Save Program Features” button. • • • • • • • • Allow users to change their own passwords using the web interface – Check this box to allow users to log into the Account Reset Console and change their own passwords. Users will still need to be a member of a group with login permissions to the Account Reset Console.
Page 58 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
Configuring Email Settings Overview The Account Reset Console can send emails to users notifying them that their accounts have been reset. It can also notify administrators of scheduled task completion and can send emails to users as part of a scheduled task. Email settings are located under the “Management” menu item, in the “Configure Email Settings” tab. Email settings can be managed by users with “Manage All Web Access Controls” privileges.
• • • • • • Server Name – Enter the name of your email server here. The Account Reset Console will use this email (SMTP) server to send emails to users. This email server requires authentication – Check this box if your email server will require authentication to send email. Username and Password – If your email server requires authentication, enter the username and password here. Source Email Address – This is the email address from which emails will appear to come.
Appearance Overview The Account Reset Console can be fully “skinned” to integrate with your existing network portal infrastructure. You can select colors and company banners to match your own themes. Console appearance settings are located under the “Management” menu item, in the “Appearance” tab. Appearance settings can be managed by users with “Manage All Web Access Controls” privileges.
Nearly all colors of the Account Reset Console can be altered at any time, as well as the banner and tagline at the top of the page. To change the appearance of the Account Reset Console, change the values in the page and click “Save Appearance Settings”. Colors All colors in the Account Reset Console are saved using standard RGB hexadecimal format. This is a six-figure string in the format RRGGBB, where “RR” is the hexadecimal representation of the red component of the color.
The background color of the menu bar can be changed by entering a new value into the “Menu Bar Color” box. “Text Color” refers to the inactive menu options; “Selected Text Color” refers to the active menu options. All colors are saved using standard RGB hexadecimal format. Customizing the Side Menu The side menu bar of the Account Reset Console can be completely customized. The background color of the inactive menu elements can be changed by entering a new value into the “Menu Color” box.
Configuring Mobile Settings Overview The Account Reset Console has a mobile site (available at the /Mobile subdirectory) which can be configured to match nearly any mobile device’s screen available. Mobile appearance settings are located under the “Management” menu item, in the “Mobile Settings” tab. Mobile settings can be managed by users with “Manage All Web Access Controls” privileges.
Data Sources Overview The Account Reset Console can utilize any ADO-compatible data source as an information source for user identity verification or logging. New data sources can be created at any time, and data source settings can be altered to reflect changes in the network configuration. Data sources are located under the “Configuration” menu item, in the “Data Sources” tab. Data sources can be managed by users with super-user account privileges.
“ConnectionStr”: Refers to any other ADO-compatible database. Users must explicitly construct their own ADO connection string for this sort of data source connection (see “Editing a Data Source,” below). The status of the data source reflects whether or not the Account Reset Console can currently communicate with the data source. The Account Reset Console will not allow you to configure a critical component with a data source that is not functioning.
The Account Reset Console does not currently support DSN connections. Editing a Microsoft Jet Data Source Microsoft Jet data sources are characterized by the server installation and database name. Editing a Microsoft SQL Server Data Source A Microsoft SQL Server 2000 data source is characterized by a SQL Server installation, a database name, a username, and a password.
Editing a General ADO-Compatible Data Source General ADO-Compatible data sources are characterized by an explicit connection string. You can enter your own connection string, allowing you to connect to any general ADO-compatible database. Logging Configuration Overview The Account Reset Console can utilize any ADO-compatible data source as a log location. Logging configuration is located under the “Configuration” menu item, in the “Log Config” tab.
Changing the Log Database You can select any working data source to set as the logging database. The Account Reset Console will not allow you to select a data source that it cannot confirm as functional. Once you select a logging data source in the drop-down box, click “Update logging settings” to save it. The Account Reset Console will attempt to log test messages to the data source you have selected.
User verification configuration is located under the “Configuration” main menu item, in the “Verification” tab. The verification configuration can be managed by users with super-user account privileges. Adding and Removing Questions The questions currently being used for verification purposes are listed at the top of the “Verification” page.
configured. (See “Editing Question Configurations” for details.) Once you have configured a question you can add it to the “asked” list. Setting the Test User A test user account is necessary to determine whether or not the questions have been correctly configured. Setting the test user allows the Account Reset Console to set and retrieve answers from your chosen data source for each question, thus confirming that each question is ready to be used for verification.
The default value for each question is “Use built-in verification database”. When this setting is selected, all other values (data source, query text) are ignored and the Account Reset Console uses the default, built-in SQL Server database to store user enrollment data. When “Use custom verification database” is selected, the Account Reset Console will attempt to connect to the specified data source and use the retrieval query to get the answer to the question or the setting query to set the answer.
you do not need to enter a setting query. If this checkbox is checked, you will need to enter a setting query. The Account Reset Console uses this query to set the answer in the database when the user configures his identity verification answers. Insertion queries are only required for verification questions whose answers can be set by the user. If the “Allow users to set their own answers to this question” checkbox is not checked, you do not need to enter an insertion query.
which have this checkbox checked. This allows you to use a mixture of pre-answered and user-configurable questions to verify user identities.
Domain Configuration Overview The Account Reset Console can manage multiple domains simultaneously. Domain configuration is located under the “Configuration” menu item, in the “Domains” tab. The domain configuration can be managed by users with super-user account privileges.
Viewing Domain Details Clicking the [details] link next to a domain name will allow you to view details on that domain. If there are multiple domain controllers available, you can set ARC to use a preferred domain controller. This is desirable for directing traffic to the nearest domain controller. Setting the Default Domain The default domain is the domain which the login domain selection boxes default to.
Application Security Overview The Account Reset Console is a password management application and as such must be security-aware. ARCWeb is capable of protecting you against SQL injection attacks and unauthorized web access by allowing you to control your own timeout parameters and permissible character sets. Security configuration is located under the “Configuration” menu item, in the “Security” tab. The security configuration can be managed by users with super-user account privileges.
• button. The default timeout period is 20 minutes, but if you have a need to make your environment more secure, you can set this as low as 1 minute. Allowed charset – This is the set of characters (case insensitive) which are acceptable in user-defined answers. Both the answer configuration and identity verification login will use this set to filter the answers before performing any queries to the database. This prevents SQL injection attacks and use of SQL escape characters in the answer strings.
To add a Super-User group, select the domain or local machine as appropriate, enter the name of the group in the edit box, and click “Set Group as SuperUsers”. This will add the windows group to the list of groups allowed super-user access to the Account Reset Console. Viewing or deleting existing Super-User Groups At the bottom of the page are the existing Super-User groups. Any group can be deleted from the list by clicking the “[del]” link next to its name.
Licensing Overview The Account Reset Console requires a valid license from Lieberman Software Corporation to run. The Licensing page allows you to view the current license details as well as reset the license in the event of an upgrade or new license purchase. Licensing is located under the “Configuration” menu item, in the “Licensing” tab. Licensing can be managed by users with super-user account privileges.
The Account Reset Console is licensed according to the number of users the system is being used to manage. A user is being managed if: • • They have the rights to log into the Account Reset Console and change their own password, or Another user can log into the Account Reset Console and reset their account. If you make changes to group membership that result in too many users being managed, the Account Reset Console may stop working or give you an alert message.
The ARCWeb Site Index Overview The Account Reset Console has an index page on the far right of the main menu which shows you every page in the application. This is for your convenience in navigating the application. Users will see index entries appropriate for their access level. Thus, only super-users and admins will see the “Management” entries, and only super-users will see the “Configuration” part of the table.
Appendix A Troubleshooting Q: When you attempt to access the web page, you receive the error: “Object Disabled”. A: This error is caused by ASP processing being disabled. This can be corrected by bringing up the properties of the ArcWeb site, clicking on the “Home Directory” tab, click on the “Configuration” button, and enabling the use of the asp.dll file for .asp processing.
Q: After installation and web site configuration, logon screen is displayed successfully. When a logon is attempted, the message: “Error: Database Not Available”. A: This error is caused by the application not being able to access the SQL Server database where the log is being kept. You may need to double-check your SQL Server credentials in the Admin Console to ensure that they are correct.
Q: When attempting to load the web site, you receive the following error: “The page cannot be displayed” followed by a 403.2 error. A: This is caused when the “Home Directory” permissions are missing the “Read” permission. Set the checkbox for “Read” permission. Q: I see the ASP source code when I try to do a report. Or, I get an error 404 when accessing the report (caused by 404.dll being mapped to ASP extensions). A: The Application Configuration page mapping is missing an entry for ASP.
Click on the “Configuration…” button located in the lower right area of the page. You will then see a dialog similar to the following: Confirm that the entry in the “Extension” column for “.asp” points to the asp.dll executable for the verbs “GET, HEAD, POST, TRACE” or the single entry of “ALL”.
Please note that the path will be unique for your installation. Q: When attempting to load the web site, you receive the following error: “Directory Listing Denied” or you see the contents of the ArcWeb\www directory. A: The correct default document has not been defined on the documents tab of your website or virtual directory. Go to the documents tab of the virtual directory or website you setup for ArcWeb and add select “Enable default content page” and add “default.asp” as the default document.
