RE: NAV Live update

  • From: "Thomas W. Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 8 Mar 2002 13:47:01 -0600

Hi Dale,

You are THE MAN! :-)

Thanks! I had been using my local admin accounts. I should have been
able to figure it out myself :-)

Good job! I'll do a tip on the Web site and give you credit!

Thanks!

Tom

-----Original Message-----
From: Dale Merrick [mailto:theuone@xxxxxxxxxxx]
Sent: Friday, March 08, 2002 6:26 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: NAV Live update


http://www.ISAserver.org


As a follow up to my post yesterday I was successful in getting a
schedule LiveUpdate to run.

I noticed in my event logs that when I did a manual LiveUpdate it was as
the domain administrator (I was logged in as that).  ISA has been told
to allow domain administrators access to the Internet.

When doing a scheduled LiveUpdate I noticed it ran in the System user
context, which doesn't have any permission to access the Internet at
all.  Hence the reason for the failure of a scheduled LiveUpdate.

I had intended to give LocalSystem permission to access the Internet but
couldn't find it anywhere when I was specifying which users and groups
had permission to go to the outside world.  Then I got to thinking that
perhaps it was a good thing that I couldn't find LocalSystem.  Afterall,
lots of services run as System and open lots of ports.  Giving
LocalSystem permission to access the Internet might bypass ISA.  Now
perhaps I just missed it and/or I'm wrong about LocalSystem bypassing
ISA if it has access permission to the Internet.  If I am someone please
let me know.

So what I did was change who Norton AntiVirus ran as.  Instead of
LocalSystem it now runs as the domain administrator (change this in the
Services applet for the Norton AntiVirus Server service).

My scheduled LiveUpdate took place at 12:00:40 AM this morning and was
successful!!!!!

Perhaps there is a better way and if there is I'd love to hear it.  If
anyone needs any help or has questions about what I did you can reach me
at either e-mail address.

Dale Merrick
theuone@xxxxxxxxxxx (home)
dmerrick@xxxxxxx (work)
 
 

-----Original Message-----
From: Dale Merrick [mailto:theuone@xxxxxxxxxxx] 
Sent: Thursday, March 07, 2002 5:44 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: NAV Live update

http://www.ISAserver.org


I also had problems with LiveUpdate on Norton AntiVirus Corp Edition
however upgrading to the latest version of LiveUpdate fixed the problem
partially.  I can now do manual live updates, but automatic ones still
fail.  If I get it working completely I'll post what I did.

Dale Merrick
theuone@xxxxxxxxxxx (home)
dmerrick@xxxxxxx (work)
 
 

-----Original Message-----
From: Sushil Bhalla [mailto:sushilb@xxxxxxxxxxxxxxxxx] 
Sent: Thursday, March 07, 2002 1:40 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: NAV Live update

http://www.ISAserver.org


Izak,

Already tried that but no luck.
Any other suggestions?

Thanks
Sushil Bhalla

> try to use de settings of your explorer when config your liveupdate
options
> Izak
> ----- Original Message -----
> From: "Sushil Bhalla" <sushilb@xxxxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Wednesday, March 06, 2002 2:31 PM
> Subject: [isalist] RE: NAV Live update
> 
> 
> > http://www.ISAserver.org
> >
> >
> > Done that.
> >
> > Still no luck. Same error as below mentioned:
> >
> > LiveUpdate was unable to establish a connection to the LiveUpdate
server.
> > .......
> >
> > In ISA Server's Properties, Outgoing Web Requests, Connections, I am
> > asking 'Unauthenticated users for identification' and in PROXY LOGS
my
> > request is going as anonymous and sc-auth status as N.
> >
> > Could that be the problem? If it is, then how can I solve it? I want
to
> > keep the 'ask unauthenticated users....' option.
> >
> > Thanks.
> >
> > Sushil Bhalla
> >
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List
as:
> ctstas@xxxxxxxxx
> > To unsubscribe send a blank email to
$subst('Email.Unsub')
> >

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
theuone@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
theuone@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ecarter@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: