Home > How-to Guides > How to set EPG Tarpit Manager Permissions

How to set EPG Tarpit Manager Permissions

This article applies to the following products:

  • Messageware Exchange Protocol Guard 2019
  • Messageware Exchange Protocol Guard 2016
  • Messageware Exchange Protocol Guard 2013

 


SUMMARY

This article outlines the steps needed to adjust permissions for EPG Tarpit management. Management is controlled by security groups setup in IIS manager.


SYMPTOM

Administrator cannot release a user from the EPG-Tarpit page in the browser. The "Blocked" checkbox is greyed out (disabled) and cannot be unchecked.

 

 
 
 

 

 

 

 

 


TASK

In order to resolve this behavior, the tarpit manager must be part of a group that has permissions to enable/disable tarpit in Active Directory and then assign the same group in IIS manager to grant access. 

 


SOLUTION

 Step 1: Make a new security group in AD with tarpit access and add user to that group 

  1. Open Active directory and right click on the server name and select "New", Then Select "Group"
  2. Give a name to the group, in this example it is Tarpit_Security
  3. Select either Global or Universal for group scope 
  4. Select Security in the group type
    •  
  5. Once the group is created, add the user to the group
    •  Right click on the new created group select Properties and then select Members 
    • Click Add and select the user that you want to add to the group, once done click Apply and OK 

Step 2: Assign AD group to EPG-Tarpit

  1.  Identify the server where the Messageware EPG Web Management is installed 
  2. Open IIS Manager
  3. Navigate to EPG - Tarpit
    • Click on the server name > Sites Default Web Sites > EPG-Tarpit
  4. Open Application Settings 
  5. Select TarpitAdmin and Edit (right pane)
    • Update the TarpitAdmin setting to add the appropriate User/Group. Example: Tarpit_Security 

Messageware EPG will apply the changes automatically within 5 minutes.

  • Reconnect to EPG-Tarpit to verify the change