locked
Allowing access to the MS Project Server resources to only certain computers RRS feed

  • Question

  • Hi,

    I would like to increase the security by allowing access to the ms project server 2010 resources only from certain computers. Can I achieve that by client certificates for SSL authenticaion? If so, is it configurable on Ms Project Server or Sharepoint 2010 level?

     

    Regards!


    asd
    Wednesday, October 5, 2011 10:48 AM

Answers

  • Given that you are opening this up via the interent, then I think you are limited to the username and password authentication only.


    Ben Howard [MVP] blog | web
    • Marked as answer by kriz82 Wednesday, October 12, 2011 1:16 PM
    Monday, October 10, 2011 8:20 AM

All replies

  • Hi,

    If I understand your question correctly, you wish to secure access to the Resource functionality of Project Server through certain computers?

    Project Server security is role based only, meaning you cannot target certain functions in the way you are asking via Project Server configuration. To restrict access to the resource capability to a specific set of users, then this can be easily achieved via the security model.

     


    Alex Burton
    www.epmsource.com | Twitter
    Project Server TechCenter | Project Developer Center | Project Server Help | Project Product Page
    Thursday, October 6, 2011 11:24 AM
  • You could potentially do it with shared logins, i.e. just set the account
    for the computer to a limited access account.  Do users log in with their
    own account or a shared one?
     
    (Note that you'd probably still have to buy licenses for everyone however.)
     
     

    Andrew Lavinsky [MVP] Blog: http://azlav.umtblog.com Twitter: @alavinsky
    Thursday, October 6, 2011 1:26 PM
  • Hi,

    First, thanks for your replies.

    Currently I am setting up a POC for a customer and I need information for the community.

    I know I can set up Sharepoint 2010 to use Client Certificate Authentication (http://technet.microsoft.com/en-us/library/gg491215.aspx).

    I also know that Project Server 2007 could be accessed via Project Web Access (PWA) in SSL client certificate scenario but not via Project Pro 2007  (http://technet.microsoft.com/en-us/library/cc197587%28office.12%29.aspx) last paragraph "Using client certificates for SSL authentication when you connect to Project Server 2007".

    Unfortunatelly, I did not find any material refering to Ms Project Pro 2010. So my question is:

    If I set up Client Certificate Authentication on SharePoint 2010 would I be able to access it via PWA and Ms Project Professional 2010?

     

    Regards!


    asd
    Friday, October 7, 2011 12:37 PM
  • Hi,

    I quess that client certificate authentication might not very popular so i can generalise my question:

    Does Ms Project Professional 2010 work over https?

     

    Regards!


    asd
    Friday, October 7, 2011 12:57 PM
  • The right way to do this is with System Center.  It is possible to restrict applications to certain desktops, users to certain desktops too. There is lots of management overhead with this as you would expect, but it works.
    Ben Howard [MVP] blog | web
    Friday, October 7, 2011 9:31 PM
  • It certainly connects to Project Server using https, but Ben has given you the best answer.
    Gary Chefetz, MCITP, MCP, MVP msProjectExperts
    Project and Project ServerFAQs
    Project Server Help BLOG
    Friday, October 7, 2011 9:35 PM
  • Thank you for your responses.
    Ben
    The users would connect to the ms project server over the internet that is why i need https.  Their computers are not part of the domain - external users. I cannot use System Center in such scenario, can I? I am not familiar with System Center but my basic understanding is that it operates within domain. I also would like to restrict access to the project server only to the certain computers that is why I thought about Client Certification Authentication (and assumed it was supported) but maybe there is a better way to achieve that.
    Gary
    Great to hear that. But when talkig about https, did you mean server certificate authenticaion or also client certificate authenticion. I am sure Client Certificate Authentication was not supported in ms project professional 2007 as it was explicitly stated on the technet page.

    asd
    Monday, October 10, 2011 7:56 AM
  • Given that you are opening this up via the interent, then I think you are limited to the username and password authentication only.


    Ben Howard [MVP] blog | web
    • Marked as answer by kriz82 Wednesday, October 12, 2011 1:16 PM
    Monday, October 10, 2011 8:20 AM