Welcome to ISAserver.org

VPN Settings - Authorized groups become GUIDs

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> VPN Settings - Authorized groups become GUIDs

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Settings - Authorized groups become GUIDs - 19.Apr.2005 6:51:00 PM

Muhnster

Posts: 6
Joined: 19.Apr.2005
Status: offline

Hello everyone,

I have come across a strange issue that has forced me to reboot my ISA Server 2004 system a few times in the last month or so. When you are looking at your "Configure VPN Client Access" in your ISA Server Management admin console and click on "Specify Windows Users..." link (2nd one down the list), it brings you to the Groups tab of the VPN Client Properties settings. Normally I would see the actual user group I created for my VPN users and namespace and domain name BUT there have been a few times where I was no longer able to VPN into the environment and all I could see in that setting was a GUID instead of a user group and NO domain name... it's like it just tripped out! I have tried a GPUPDATE on this and stopped and restarted all ISA Services but to no avail... the only thing that successfully resets this to the right setting is a system reboot. Anyone else run across this issue? I have to admit that this usually occurs after some changes (ISA ONLY changes) has been made but no system changes are required to have this happen. any ideas?

Post #: 1

Featured Links*

RE: VPN Settings - Authorized groups become GUIDs - 19.Apr.2005 7:49:00 PM

ClintD

Posts: 1833
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

More accurately, they're SIDs and typically occur when ISA can't connect to the domain in which it is a member to resolve the SID to a user account.

What DNS Server addresses do you have assigned on both the External and Internal network interfaces?

The resolution of rebooting the ISA Server sounds like the DNS Client service re-ordering the list of DNS Servers assigned to the system - over time, due to the number of successful queries, the external DNS server is given a higher priority and results in the behavior you're describing.

Of course, it could be something else, but I'd recommend you check out DNS first to rule out connectivity issues with the domain.

(in reply to Muhnster)

Post #: 2

RE: VPN Settings - Authorized groups become GUIDs - 20.Apr.2005 7:18:00 PM

cytranic

Posts: 33
Joined: 18.Aug.2004
Status: offline

This also happends if you delete a user or a group that was assigned privalages.

(in reply to Muhnster)

Post #: 3

RE: VPN Settings - Authorized groups become GUIDs - 5.May2005 5:17:00 PM

scottalanmiller

Posts: 2
Joined: 5.May2005
From: Geneseo, NY
Status: offline

I am having the exact same issue here. Groups SIDs instead of the group names and no users in those groups are able to connect. I have one group whose name did show up instead of the SID and members of that group are able to connect. No resolution yet.

(in reply to Muhnster)

Post #: 4

RE: VPN Settings - Authorized groups become GUIDs - 5.May2005 5:29:00 PM

scottalanmiller

Posts: 2
Joined: 5.May2005
From: Geneseo, NY
Status: offline

Check your event logs on your Active Directory server. I have a DCOM issue that the RPC can't go through and, for some reason, my registry shows no supported DCOM protocols.

(in reply to Muhnster)

Post #: 5