RE: [islets] RE: ISA 2004 authentication issue
- From: "MJ" <mjtech@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sat, 21 Jan 2006 16:10:26 -0500
that's how I exactly did few minutes ago, but I am still seeing
"unauthenticated users"
do you I need to enable the "Require All Users to Authenticate" again. Just
asking :)
-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Saturday, January 21, 2006 4:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 authentication issue
http://www.ISAserver.org
Create a "local" ISA group, and add the domain's "Domain Users" group to it.
Then remove "All Users" from the rule and add only the new group you
specified.
Give that a shot and let us know...
t
-----
"I'll see your Llama and up you a Badger."
John T
----- Original Message -----
From: "MJ" <mjtech@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, January 21, 2006 12:46 PM
Subject: [isalist] RE: ISA 2004 authentication issue
> http://www.ISAserver.org
>
> then what group should I selcet?
>
> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxx]
> Sent: Saturday, January 21, 2006 3:34 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 authentication issue
>
>
> http://www.ISAserver.org
>
> Exactly.............All Users is the anonymous group
>
> -----Original Message-----
> From: MJ [mailto:mjtech@xxxxxxxxx]
> Sent: Saturday, January 21, 2006 4:25 PM
> To: ISA Mailing List
> Subject: [isalist] RE: ISA 2004 authentication issue
>
> http://www.ISAserver.org
>
> I do have all users selected
>
> do you I need to select specific groups or what?
>
> Thanks
>
> -----Original Message-----
> From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
> Sent: Saturday, January 21, 2006 3:21 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 authentication issue
>
>
> http://www.ISAserver.org
>
> MJ- is your outbound access rule set to "All Users" or do you have it
> set to a group containing your domain users?
>
> I too require user-based logs, and have "require authentication" checked
> (integrated only selected) and have set the "Users" to a group I created
> that contains "Domain Users" as the only group that has access. While
> this creates several "denied" entries for "anonymous," all users are
> logged appropriately, and have seamless access.
>
> When you/PSS get it sorted out, please do tell us what the problem
> was...
> You've got something strange going on...
>
> t
>
> -----
> "I'll see your Llama and up you a Badger."
> John T
>
>
>
> ----- Original Message -----
> From: "MJ" <mjtech@xxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Saturday, January 21, 2006 12:08 PM
> Subject: [isalist] RE: ISA 2004 authentication issue
>
>
>> http://www.ISAserver.org
>>
>> sounds good.
>>
>> then please tell me how to fix it, if you say that I don't need then I
>
>> promise you I will turn off that option.
>>
>> Thanks
>>
>> -----Original Message-----
>> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
>> Sent: Saturday, January 21, 2006 3:04 PM
>> To: [ISAserver.org Discussion List]
>> Subject: [isalist] RE: ISA 2004 authentication issue
>>
>>
>> http://www.ISAserver.org
>>
>> Yep, but there's a secret registry entry that will fix it ;-)
>>
>> Thomas W Shinder, M.D.
>> Site: www.isaserver.org
>> Blog: http://spaces.msn.com/members/drisa/
>> Book: http://tinyurl.com/3xqb7
>> MVP -- ISA Firewalls
>> **Who is John Galt?**
>>
>>
>>
>>> -----Original Message-----
>>> From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
>>> Sent: Saturday, January 21, 2006 1:48 PM
>>> To: [ISAserver.org Discussion List]
>>> Subject: [isalist] RE: ISA 2004 authentication issue
>>>
>>> http://www.ISAserver.org
>>>
>>> As I think about it more, I do remember putting a check mark in the
>>> "Require all users to authenticate" once. Shortly afterwards, after
>>> a hundred phone calls about people getting login prompts, I had to
>>> turn it back off.
>>>
>>> -----Original Message-----
>>> From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
>>> Sent: Saturday, January 21, 2006 2:34 PM
>>> To: [ISAserver.org Discussion List]
>>> Subject: [isalist] RE: ISA 2004 authentication issue
>>>
>>> http://www.ISAserver.org
>>>
>>> Okay, NOW I remember that option...
>>>
>>> -----Original Message-----
>>> From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
>>> Sent: Friday, January 20, 2006 11:59 PM
>>> To: [ISAserver.org Discussion List]
>>> Subject: [isalist] RE: ISA 2004 authentication issue
>>>
>>> http://www.ISAserver.org
>>>
>>> In 2004, you can still configure the the authentication method for
>>> the web proxy listener. Go to the properties for the network, select
>
>>> Web Proxy, and then click the "Authentication" button.
>>>
>>> This allows you to choose the auth methods supported for your
> clients.
>>> This
>>> is where the OP had to select "require all users to authenticate."
>>> Just
>>>
>>> making sure someone didn't put him in "basic auth" land...
>>>
>>> t
>>>
>>>
>>> -----
>>> "I'll see your Llama and up you a Badger."
>>> John T
>>>
>>>
>>>
>>> ----- Original Message -----
>>> From: "Ball, Dan" <DBall@xxxxxxxxxxx>
>>> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>>> Sent: Friday, January 20, 2006 8:32 PM
>>> Subject: [isalist] RE: ISA 2004 authentication issue
>>>
>>>
>>> http://www.ISAserver.org
>>>
>>> It's ISA2004, not 2000, it uses regular groups. Unless there is a
>>> setting with that name that completely escapes my memory.
>>>
>>> -----Original Message-----
>>> From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
>>> Sent: Friday, January 20, 2006 11:08 PM
>>> To: [ISAserver.org Discussion List]
>>> Subject: [isalist] RE: ISA 2004 authentication issue
>>>
>>> http://www.ISAserver.org
>>>
>>> The authentication method wasn't changed to "basic" by chance, was
> it?
>>> Still at "Integrated Authentication?"
>>>
>>> t
>>>
>>> -----
>>> "I'll see your Llama and up you a Badger."
>>> John T
>>>
>>>
>>>
>>> ----- Original Message -----
>>> From: "MJ" <mjtech@xxxxxxxxx>
>>> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>>> Sent: Friday, January 20, 2006 7:31 PM
>>> Subject: [isalist] RE: ISA 2004 authentication issue
>>>
>>>
>>> > http://www.ISAserver.org
>>> >
>>> > I rebooted and didn't fix it.
>>> > I believe that something was change by some body else while
>>> > troubleshooting another problem about not being able to hit some
>>> > web sites.
>>> > Thanks
>>> >
>>> > -----Original Message-----
>>> > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
>>> > Sent: Friday, January 20, 2006 10:21 PM
>>> > To: [ISAserver.org Discussion List]
>>> > Subject: [isalist] RE: ISA 2004 authentication issue
>>> >
>>> >
>>> > http://www.ISAserver.org
>>> >
>>> > Had that happen a couple of times, a reboot usually cleared it.
>>> > Anything changed?
>>> >
>>> > -----Original Message-----
>>> > From: MJ [mailto:mjtech@xxxxxxxxx]
>>> > Sent: Friday, January 20, 2006 9:14 PM
>>> > To: [ISAserver.org Discussion List]
>>> > Subject: [isalist] RE: ISA 2004 authentication issue
>>> >
>>> > http://www.ISAserver.org
>>> >
>>> > ISA is a member server of the root domain,and all users are in the
>>> child
>>> > domain.
>>> > the funny thing is that this been working for about 2 months with
>>> > no problems.
>>> >
>>> > -----Original Message-----
>>> > From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
>>> > Sent: Friday, January 20, 2006 8:59 PM
>>> > To: [ISAserver.org Discussion List]
>>> > Subject: [isalist] RE: ISA 2004 authentication issue
>>> >
>>> >
>>> > http://www.ISAserver.org
>>> >
>>> > There can be a lot of different reasons for it, but it "shouldn't"
>>> > happen. Is your ISA server a member of said domain?
>>> >
>>> > -----Original Message-----
>>> > From: MJ [mailto:mjtech@xxxxxxxxx]
>>> > Sent: Friday, January 20, 2006 8:16 PM
>>> > To: [ISAserver.org Discussion List]
>>> > Subject: [isalist] ISA 2004 authentication issue
>>> >
>>> > http://www.ISAserver.org
>>> >
>>> > ISA Server 2004, with "Windows Authentication" and "Require
>>> All Users
>>> To
>>> > Authenticate"
>>> >
>>> > Now with this ISA shouldn't prompt domain users for a user and a
>>> > password.
>>> >
>>> > The one I have still prompting. Is there a reason for this?
>>> How can I
>>> > fix
>>> > it?
>>> >
>>> > Thanks
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > ISA Server Newsletter:
>>> > http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server FAQ:
>>> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > You are currently subscribed to this ISAserver.org
>>> Discussion List as:
>>> > dball@xxxxxxxxxxx
>>> > To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > ISA Server Newsletter:
>>> > http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server FAQ:
>>> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > You are currently subscribed to this ISAserver.org
>>> Discussion List as:
>>> > mjtech@xxxxxxxxx
>>> > To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > ISA Server Newsletter:
>>> > http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server FAQ:
>>> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > You are currently subscribed to this ISAserver.org
>>> Discussion List as:
>>> > dball@xxxxxxxxxxx
>>> > To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > ISA Server Newsletter:
>>> > http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server FAQ:
>>> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > You are currently subscribed to this ISAserver.org
>>> Discussion List as:
>>> > mjtech@xxxxxxxxx
>>> > To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > ISA Server Newsletter:
>>> > http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server FAQ:
>>> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > You are currently subscribed to this ISAserver.org
>>> Discussion List as:
>>>
>>> > thor@xxxxxxxxxxxxxxx
>>> > To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>>
>>>
>>> ------------------------------------------------------
>>> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> You are currently subscribed to this ISAserver.org Discussion List
> as:
>>> dball@xxxxxxxxxxx
>>> To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>
>>> ------------------------------------------------------
>>> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> You are currently subscribed to this ISAserver.org Discussion List
>>> as:
>>> thor@xxxxxxxxxxxxxxx
>>> To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>
>>>
>>>
>>> ------------------------------------------------------
>>> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> You are currently subscribed to this ISAserver.org Discussion List
> as:
>>> dball@xxxxxxxxxxx
>>> To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>
>>> ------------------------------------------------------
>>> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> You are currently subscribed to this ISAserver.org Discussion List
> as:
>>> dball@xxxxxxxxxxx
>>> To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>
>>> ------------------------------------------------------
>>> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> You are currently subscribed to this ISAserver.org Discussion List
>>> as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
>>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>
>>>
>>
>> ------------------------------------------------------
>> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> You are currently subscribed to this ISAserver.org Discussion List as:
>> mjtech@xxxxxxxxx
>> To unsubscribe visit
>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>> Report abuse to listadmin@xxxxxxxxxxxxx
>>
>>
>> ------------------------------------------------------
>> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> You are currently subscribed to this ISAserver.org Discussion List as:
>> thor@xxxxxxxxxxxxxxx
>> To unsubscribe visit
>> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>> Report abuse to listadmin@xxxxxxxxxxxxx
>>
>>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> mjtech@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> mjtech@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> thor@xxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mjtech@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
