RE: ISA 2004 authentication issue

  • From: "Thor \(Hammer of God\)" <thor@xxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 21 Jan 2006 12:21:21 -0800

MJ- is your outbound access rule set to "All Users" or do you have it set to a group containing your domain users?

I too require user-based logs, and have "require authentication" checked (integrated only selected) and have set the "Users" to a group I created that contains "Domain Users" as the only group that has access. While this creates several "denied" entries for "anonymous," all users are logged appropriately, and have seamless access.

When you/PSS get it sorted out, please do tell us what the problem was... You've got something strange going on...

t

-----
"I'll see your Llama and up you a Badger."
John T



----- Original Message ----- From: "MJ" <mjtech@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, January 21, 2006 12:08 PM
Subject: [isalist] RE: ISA 2004 authentication issue



http://www.ISAserver.org

sounds good.

then please tell me how to fix it, if you say that I don't need then I
promise you I will turn off that option.

Thanks

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Saturday, January 21, 2006 3:04 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 authentication issue


http://www.ISAserver.org

Yep, but there's a secret registry entry that will fix it ;-)

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**



-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: Saturday, January 21, 2006 1:48 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 authentication issue

http://www.ISAserver.org

As I think about it more, I do remember putting a check mark in the
"Require all users to authenticate" once.  Shortly afterwards, after a
hundred phone calls about people getting login prompts, I had
to turn it
back off.

-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: Saturday, January 21, 2006 2:34 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 authentication issue

http://www.ISAserver.org

Okay, NOW I remember that option...

-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Friday, January 20, 2006 11:59 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 authentication issue

http://www.ISAserver.org

In 2004, you can still configure the the authentication method for the
web
proxy listener.  Go to the properties for the network, select
Web Proxy,
and
then click the "Authentication" button.

This allows you to choose the auth methods supported for your clients.
This
is where the OP had to select "require all users to
authenticate."  Just

making sure someone didn't put him in "basic auth" land...

t


----- "I'll see your Llama and up you a Badger." John T



----- Original Message -----
From: "Ball, Dan" <DBall@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, January 20, 2006 8:32 PM
Subject: [isalist] RE: ISA 2004 authentication issue


http://www.ISAserver.org

It's ISA2004, not 2000, it uses regular groups.  Unless there is a
setting with that name that completely escapes my memory.

-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Friday, January 20, 2006 11:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 authentication issue

http://www.ISAserver.org

The authentication method wasn't changed to "basic" by chance, was it?
Still at "Integrated Authentication?"

t

-----
"I'll see your Llama and up you a Badger."
John T



----- Original Message -----
From: "MJ" <mjtech@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, January 20, 2006 7:31 PM
Subject: [isalist] RE: ISA 2004 authentication issue


> http://www.ISAserver.org > > I rebooted and didn't fix it. > I believe that something was change by some body else while > troubleshooting > another problem about not being able to hit some web sites. > Thanks > > -----Original Message----- > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] > Sent: Friday, January 20, 2006 10:21 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: ISA 2004 authentication issue > > > http://www.ISAserver.org > > Had that happen a couple of times, a reboot usually cleared it. > Anything changed? > > -----Original Message----- > From: MJ [mailto:mjtech@xxxxxxxxx] > Sent: Friday, January 20, 2006 9:14 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: ISA 2004 authentication issue > > http://www.ISAserver.org > > ISA is a member server of the root domain,and all users are in the child > domain. > the funny thing is that this been working for about 2 months with no > problems. > > -----Original Message----- > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] > Sent: Friday, January 20, 2006 8:59 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: ISA 2004 authentication issue > > > http://www.ISAserver.org > > There can be a lot of different reasons for it, but it "shouldn't" > happen. Is your ISA server a member of said domain? > > -----Original Message----- > From: MJ [mailto:mjtech@xxxxxxxxx] > Sent: Friday, January 20, 2006 8:16 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] ISA 2004 authentication issue > > http://www.ISAserver.org > > ISA Server 2004, with "Windows Authentication" and "Require All Users To > Authenticate" > > Now with this ISA shouldn't prompt domain users for a user and a > password. > > The one I have still prompting. Is there a reason for this? How can I > fix > it? > > Thanks > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > dball@xxxxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > mjtech@xxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > dball@xxxxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > mjtech@xxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as:

> thor@xxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>


------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: dball@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as:
thor@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
dball@xxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
dball@xxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mjtech@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx






Other related posts: