How can I configure ISA 2006 Standard Edition to authenticate users without asking them to enter their credentials? I mean when a user login to the domain the ISA automatically receive their credential from DC!
< Message edited by rezanet -- 21.Jun.2007 8:40:04 AM >
Hi Tarek, I do not want to give you the impression that I am "after you"(or have something against you), but his comments are in the unihomed section of ISA 2006 and I don't see how can we use the FWC in this situation. Cheers!
From: Lebanese in Kuwait
Hey justmee, Dont worry , I would never in such a way
a ONE Answer do not implies a complete Answer , he didnt State that he has a single NIC right ?? so he asked the question and this is my answer, later if he replies with i HAVE a One Nic ISA, then the answer will be that he can not use the Firewall Cliet and needs to click the Remember my Password for Web Proxy Client.
I Expect now a reply from you stating what if he is using a Home Edition XP and does not have the option to remember password , well what should i do, he didnt mention what OS he has !!
One can't have all the answers and predict if the user posted in the right forum or has this and that, unless he clearly state this and that
Well hello gentlemans, First of all thank you for your attention. I thought that when I send my post in Unihomed section it would be obvious that my ISA installed on one interface adapter server. And about that option that "elmajdal" told in previouse post, where I have to set this option? All users in our network uses MS Windows XP Pro and Vista Business OS. And one more thing that you may need to know is that my ISA deployed in DMZ mode.
from your domain machine user account, when you open Internet Explorer ( Proxy Setting should be set ) a pop up window will appear where you should enter your credentials, there you will have a checkbox to remember the user credentials instead of each time re entering these credentials.
Thank you ITEngineer. Is there any other solution? Because for a company with 1000 Clients (just like us) it looks like a nightmare to explain it for each user! even once! But if it's the only way , ok we will go for it...!
From: Lebanese in Kuwait
If you installed a 2nd Nic Into your ISA Server, then you can deploy the Firewall Client Through GPO and Your IE Settings will be set using automatic configuration script.
If You do Not wish to install a 2nd Nic Into Your ISA, then u can set IE Proxy Settings using GPO, and send your users an email, explaining to them to enter their domain credentials in the pop up box they will have once they try to open any page from IE.
Out of curiosity, I wanted to post a reply to this as I have a single NIC instance of ISA 2006 (the MSDN .VHD, Enterprise Edition) and I checked integrated authentication and that does not bring up a logon prompt. The ISA logs record the username and I can get some specifc reporting this way. If I select basic authentication, It prompts for a login. Look under Networks -> Internal -> Web Proxy -> Authentication
Am I missing something? Thanks!
< Message edited by Enlil242 -- 9.Jul.2007 2:51:58 PM >
Scenario seems right to me, Enlil.. I looked over the thread and I don't understand the original problem either. It seems to me that integrated auth with IE should work without requiring credentials entry, assuming of course that the proxy settings in IE are correct.
Maybe there's a subtle point I haven't understood about the original situation.