I'm using WSS 2.0 right now. Functionality of the site improved quite a lot from 1.0. The security model didn't seem to change much at all though. I don't understand why they didn't make it speak AD right from the get go. In WSS you have to have an AD account to exist as a WSS account but both are managed separately. I can't see this working on a large scale. I find that managing the permissions for just 30 users is difficult. The worst part is that they've spread out the bits where you set the security options in many different locations. It always takes me way too much clicking around to find where they've put the stuff I'm looking for. Amy ________________________________ From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Gerald G. Young Sent: Tuesday, September 19, 2006 2:29 PM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: FW: Problem viewing external Sharepoint site Are we talking about Windows SharePoint Services? Or are we talking SharePoint Portal Server 2003? If the latter, that integrates with AD in a similar fashion to how SQL server accounts integrate with AD. I haven't done a lot with it but I have created users. During that creation phase, I'd create a "SharePoint User" and tie that account to an "AD User" so that all a user had to do to log on was use their AD credentials. Not sure about WSS but perhaps it's better in WSS 2.0 (included in R2 or available as a download - 3.0 Beta 2 is out)? Cordially yours, Jerry G. Young II Applications Engineer, Platform Engineering Enterprise Hosting NTT America, an NTT Communications Company 22451 Shaw Rd. Sterling, VA 20166 Office: 571-434-1319 Fax: 703-333-6749 Email: g.young@xxxxxxxx ________________________________ From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God) Sent: Tuesday, September 19, 2006 1:33 PM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: FW: Problem viewing external Sharepoint site I had no idea it wouldn't integrate with AD. What's the point, then? You have to manage separate, local accounts? That's nuts. Doing the testing on that site just brought it all back up for me... Using VPN+RDP really works well for me; particularly since my main data-access applications require VPN+RDP anyway. Thanks for the input. t On 9/19/06 10:28 AM, "Thomas W Shinder" <tshinder@xxxxxxxxxxx> spoketh to all: Hi Amy, Good point regarding the security tools/config information available. One reason why I haven't spent more time on it is that there doesn't seem to be any good information on it's permissions model. Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> On Behalf Of Amy Babinchak Sent: Tuesday, September 19, 2006 12:23 PM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: FW: Problem viewing external Sharepoint site Because it doesn't integrate with Active Directory it's a pain to manage. The security tools are pretty lame at this point as well. I consider it a work in progress. Amy ________________________________ From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> On Behalf Of Thor (Hammer of God) Sent: Tuesday, September 19, 2006 12:59 PM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: FW: Problem viewing external Sharepoint site So, what's the group consensus on Sharepoint? Lots of you guys using/deploying it? I've not looked into the security of the product, but would like to at least get the "feel" from guys... t On 9/19/06 9:50 AM, "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx> spoketh to all: OK, after further review both behind ISA and 2 locations not behind ISA. I've reached the conclusion that they are bunch of liars. If they only get complaints from people with ISA servers, then it's because only people with ISA servers expect things to work. Sorry for bothering. Amy ________________________________ From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> On Behalf Of Thor (Hammer of God) Sent: Tuesday, September 19, 2006 10:49 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: FW: Problem viewing external Sharepoint site I would think their logs would be more helpful... The 302 is odd, though. Also, I can test outside of an ISA environment if you would like for me to. t On 9/19/06 7:08 AM, "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx> spoketh to all: Not SSL. Would the capture and ISABPA do any good since this isn't my sharepoint site? I'd only be able to give you my end of things. This is the site with the problem. I can send over my login information to your private email if you want to see the problem first hand. http://www.culminisconnections.com/default.aspx Amy ________________________________ From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> <mailto:isapros-bounce@xxxxxxxxxxxxx%5d> On Behalf Of Jim Harrison Sent: Tuesday, September 19, 2006 9:23 AM To: isapros@xxxxxxxxxxxxx; isapros@xxxxxxxxxxxxx Subject: [isapros] Re: FW: Problem viewing external Sharepoint site Is this SSL? Got Craptures? Got ISABPAPack data? ________________________________ From: isapros-bounce@xxxxxxxxxxxxx on behalf of Amy Babinchak Sent: Tue 9/19/2006 5:39 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] FW: Problem viewing external Sharepoint site Anyone have a chance to look at the attached log and offer an opinion on whether this is an ISA problem or a problem with the website? Keep in mind this is not an SBS question and the sharepoint site is not behind an ISA firewall. Only the user attempting to view the sharepoint site is behind an ISA server. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] <mailto:isalist-bounce@xxxxxxxxxxxxx%5d> <mailto:isalist-bounce@xxxxxxxxxxxxx%5d> <mailto:isalist-bounce@xxxxxxxxxxxxx%5d> <mailto:isalist-bounce@xxxxxxxxxxxxx%5d> <mailto:isalist-bounce@xxxxxxxxxxxxx%5d> On Behalf Of Amy Babinchak Sent: Monday, September 18, 2006 4:48 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Problem viewing external Sharepoint site Hi guys, I've got a charity case here with the company that supports SBS user groups for Microsoft. They say that users behind ISA are unable to view their public Sharepoint site. When I attempt to view the site I am challenged for my username and password about 7 times then it displays. However, when I try to move to another page the website changes to a page that tells me my credentials are incorrect. I'm leaning toward saying that the website needs help but he insists that only people behind ISA servers have any problem with the site. I've attached my log. There are a wider variety of error messages that I'm used to seeing. Do you think this is a website issue or something I can change on my end to make viewing this site easier? Thanks, Amy All mail to and from this domain is GFI-scanned.