Welcome to ISAserver.org

Firewall Client Disabled?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Firewall Client Disabled?

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Client Disabled? - 20.Oct.2006 4:03:16 PM

BobW

Posts: 200
Joined: 27.Mar.2002
Status: offline

I pushed out my firewall client via GPO and some of the end users are reporting that the client is disabled.

Is there someway to turn it on automatically? I have wpad setup in DHCP and DNS and have defined the necessary firewall clent settings on the "internal network" on ISA.

Thanks
Bob

PS This is an upgraded ISA box from 2004 SP2.

Post #: 1

Featured Links*

RE: Firewall Client Disabled? - 20.Nov.2006 11:32:31 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Bob,

It should be enabled by default. Are the users successfully authenticating?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to BobW)

Post #: 2

RE: Firewall Client Disabled? - 20.Nov.2006 1:05:20 PM

BobW

Posts: 200
Joined: 27.Mar.2002
Status: offline

They are authenticating against the Domain.

What occurred is I uninstaleld the ISA 2004 via GPO and then installed ISA 2006 client via GPO. A lot of my clients are simplshowing up as disabled when I visit their desks.

So, I need to figure out how to force them to be enabled.

Very strange....
Bob

(in reply to tshinder)

Post #: 3

RE: Firewall Client Disabled? - 24.Nov.2006 12:47:35 PM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Bob,

Don't know what's happening here. Let us know if you figure it out.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to BobW)

Post #: 4

RE: Firewall Client Disabled? - 24.Nov.2006 1:24:09 PM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

A lot of my clients are simplshowing up as disabled when I visit their desks.

u mean the FWC has a red X on it ?

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to BobW)

Post #: 5

RE: Firewall Client Disabled? - 29.Dec.2006 4:31:47 PM

mpn7338

Posts: 6
Joined: 29.Dec.2006
Status: offline

Hello
I have the exact same problem and I need to get a fix on this asap. On thusday all of my users will get back to work and there will be alot of phonecalls if I don�t fix this til then.

Best regards
Magnus

(in reply to elmajdal)

Post #: 6

RE: Firewall Client Disabled? - 29.Dec.2006 4:34:14 PM

mpn7338

Posts: 6
Joined: 29.Dec.2006
Status: offline

I have noticed that this only apply to my xp clients, not my win2000.

Best regards
Magnus

(in reply to mpn7338)

Post #: 7

RE: Firewall Client Disabled? - 30.Dec.2006 8:27:08 AM

Guest

Hi Magnus,
maybe this will help:
http://forums.isaserver.org/fb.aspx?m=2002018278

(in reply to mpn7338)

Post #: 8

RE: Firewall Client Disabled? - 22.Feb.2007 12:31:10 PM

MNelms

Posts: 1
Joined: 22.Feb.2007
Status: offline

quote:

ORIGINAL: BobW

I pushed out my firewall client via GPO and some of the end users are reporting that the client is disabled.

Is there someway to turn it on automatically? I have wpad setup in DHCP and DNS and have defined the necessary firewall clent settings on the "internal network" on ISA.

Thanks
Bob

PS This is an upgraded ISA box from 2004 SP2.

I'm sure you have either solved this or worked around it by now but I thought I'd add my 2 cents.

I had the exact same problem on my install base and tracked it down to the uninstall not deleting the c:\documents and settings\all users\application data\microsoft\Firewall Client 2004 folder or the files in it.

If you delete those files before install then you will get the client enabled and all is well. If they exist, then you must uninstall and reinstall after removing them.

I'm not sure if it's a reformat inside the ini files or what but that solves it and you can easily reproduce it.

Now to figure out how to SMS push a delete of that folder or files, uninstall and reinstall to fix the systems affected in my install base of over 1k systems. :(

(in reply to BobW)

Post #: 9

RE: Firewall Client Disabled? - 29.Mar.2007 12:21:15 AM

kwhelan

Posts: 43
Joined: 30.Aug.2004
Status: offline

I have tried deleting those all user files and reinstalling but it didn't fix it for me.,
If you enable the client after logon manually it will remember it from then on but as i don't use roaming profiles I need to find why its not just defaulting to on,Cant find anything in the registry yet that makes any difference.

(in reply to MNelms)

Post #: 10

RE: Firewall Client Disabled? - 7.May2007 11:56:05 AM

kevlarstorm

Posts: 7
Joined: 21.Jan.2005
Status: offline

Hi,

I also had the problem when upgrading to the new Vista/ISA 2006 client. Each computer that I installed the client on using a AD GPO would install in disabled mode. I would manually have to enable the client after logging into the computer. This was not the only problem. The client would be disabled in each user profile on that computer until manually enabled.

I noticed on the old ISA Server 2004 client (installed on Windows XP) that the common.ini file that is used to configure the ISA client is stored in the following location: C:\Documents and Settings\All Users\Application Data\Microsoft\Firewall Client 2004\common.ini. However, on the new client it is stored in the users profile here: C:\Documents and Settings\kevlarstorm\Local Settings\Application Data\Microsoft\Firewall Client 2004\common.ini.

Knowing this information, I was able to copy the applicable common.ini file to a network location and use a product called desktop standard (now owned by Microsoft) to deploy the file to a newly created folder in each user's profile. I'm not sure why Microsoft required that this folder and file be created for each profile but it does look like the client is dependent on each user profile for applicable settings. I'm hoping that Microsoft will fix this in the next release or at least explain the reasoning behing it.

This fix is still not 100% effective as it sometimes fails to work the first time a user logs onto a computer. It is better than nothing though and works for most users who have previously logged into their computer. The downer is that it requires a third party tool or some scripting to create the folder and file above.

(in reply to kwhelan)

Post #: 11