When a user attempts to log in to the on-prem web console, Lansweeper automatically checks the Windows group to which the user belongs. Most likely, the reason you are unable to access the web console is that the group the concerning user account is in, is not listed in the Windows groups that are allowed to access the Lansweeper web console under
Configuration\Website Settings.
More information on this can be found in this knowledge base article: https://community.lansweeper.com/t5/customizing-the-web-console/restrict-access-to-the-web-console/t...
If the issue persists after double-checking the group access under Configuration\Website Settings, we would recommend going over the following points:
- UAC (User Account Control) must be disabled on the server hosting the Lansweeper console, as UAC is known to cause issues with group detection.
- The domains of the Lansweeper server and the problem user must be trusted/must be in the same forest.
- Double-check the Windows groups that you have configured in Lansweeper:
- Nested groups are not supported.
- The group must be a universal security group.
- The group must be a manually created group. Built-in groups like the domain admins group may not work. Domain local groups are not supported.
- If the users were only recently added to the group, their user account must be logged out and back in (not just out of Lansweeper) in order for the group changes to take effect.
Once you have gone through these steps and verified that everything is correctly set up, ensure that the concerning user account logs out and back into Lansweeper.
