Re: Local Admin Accessing the Internet

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 17 Nov 2003 07:42:08 -0800

You've got it right; there's a half-baked cake on your lips...  ;-)

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Kincer, Rick" <Rick_Kincer@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, November 17, 2003 06:43
Subject: [isalist] Local Admin Accessing the Internet


http://www.ISAserver.org


Hello all,

I have ISA Enterprise in Integrated mode as a stand-alone server in an NT
domain requiring authentication by groups with workstations set up as
WebProxy users. I have Site and Content Rules set up for access by group,
Protocol Rules, Packet Filters and all the regular security type stuff
configured also.

I have the Outgoing Web Requests set to Use the Same Listener and Basic and
Integrated are both selected along with Ask unauthenticated user for
Identification is checked. I have had ISA configured this way for a long
time but there is always a group needing changes....

Question I have is:

If I have users that are logging in local to a machine i.e. as
Administrator, when they attempt to access the Internet they receive the
default "page can not be found" message, is there a way to get the login
screen to come up for those users to log into the ISA server for Internet
access even though they are not logged into the domain? Of course if I allow
all in the Site and Content Rules they can get through but I can't do
that...<g> I don't want to use them as SecureNAT clients.

I'm thinking the user, no logged into the domain, not being prompted to log
in might be a result of making the change stated in the "Multiple
Authentication Dialog Boxes are Displayed When You Use Access Control" MS
article 297324.... I was hoping I might be wrong and I could have my =cake
and eat it too...<g>


Thank you,

Rick

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*

All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*



Other related posts: