Windows Admin Center: how to limit https access?

Question

I have installed Windows Admin Center on a 2019 server.
My problem: everyone can access it on https!!
There is nor firewall rule, there is no IIS. Even normal domain user can login (of course they cant connect to any server from there).

So how can I limit who can even logon? Normal I would utilize Windows Firewall or even IIS, but there are no firewall rules nor do I find an IIS.

Answer 1

Hello,

Did you try to configure the access via Active Directory groups ?
Below you have an article regarding how you can use this to restrict access :
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/configure/user-access-control#active-directory-or-local-machine-groups

Best Regards,

Answer 2

The problem is, that in "Gateway Access" under "Allowed groups" I cant add any groups. The "Add" button is missing.

Answer 3

Ok, did you enable the RBAC on your gateway ?
It's located under your gateway on the Settings part (Where you have File shares, environment variables, etc...)
After that you will be able to manage the access via the new roles :

• Windows Admin Center Administrators
• Windows Admin Center CredSSP Administrators
• Windows Admin Center Hyper-V Administrators
• Windows Admin Center Readers

Because these are local groups you should use GPOs to configure it

Regards,

Answer 4

I understood I need the RBAC only to access the servers, not the gateway?
I only need to limit the https access to the gateway.

Answer 5

Yes the RBAC role will be to access the servers but you can also configure it for your gateway because your gateway can also be a server :)
Maybe you try to limit the access via the Firewall rule "SmeInboundOpenException"