Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
What is the feature called please...
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login | |
|
What is the feature called please... - 4.Aug.2008 2:03:41 PM
|
|
|
keswadmin
Posts: 3
Joined: 4.Aug.2008
Status: offline
|
Help is needed by this site neebie, having a mad moment. I have had to upgrade the ISA (2006) server from standard to enterprise to get access to a feature we needed. Only now that the summer holidays are here, (this is a school) and I have upgraded, I can't remember what the feature is called to look up how to configure it... so much has happened since the beginning of last week (3 hard drives in 1 server failed together - and system state was not being backed up for some reason!) The senario is that some of the students have established that if they remove the network cables from the desktop or printer in their boarding house - or worse still the wireless point which is PoE (several laptops have died following this move!), they can put that cable into their laptop and still gain internet access at all hours of the night. I still need to be able to give the boarding house staff and other staff who live on site access 24/7. So I had established that the upgrade to enterprise edition would allow me AD intergration and basically via groups and times, turn off their internet access at the same hours that their wireless access is terminated. I know that I can use intergrated windows authentication for those students using school equipment, and non school accounts will get prompted to enter their school account details - these students are used to this for both email and network data access, so it is not an issue.... the issue here is my memory.... hoping someone knows what I am talking about... thanks in advance.
|
|
|
|
RE: What is the feature called please... - 5.Aug.2008 10:49:43 AM
|
|
|
tshinder
Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online
|
I'm not sure what feature you're trying to figure out. Enterprise edition isn't required for AD integration, Standard edition will work fine. Are you trying to force authentication for outbound access? Thanks! Tom
_____________________________
Thomas W Shinder, M.D. Sr. Consultant/Technical Writer Prowess Consulting http://www.prowessconsulting.com/ Blog: http://blogs.isaserver.org/shinder/ GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
RE: What is the feature called please... - 5.Aug.2008 1:11:39 PM
|
|
|
keswadmin
Posts: 3
Joined: 4.Aug.2008
Status: offline
|
Sorry, you mis-understand me or else I can not explain myself... just me I expect The feature I am after that allows me to set the times of access for each of my AD groups is only available on the enterprise edition. This is so that each of the groups - already in existance on AD - can have usage hours for internet access, to prevent student access to the internet after hours when they put a network cable into their laptops. (The wireless system will decide which group they are in already and prevent access to any network resource by restricting access at certain hours of the night. regretfully it does not work for LAN cards only wireless cards.) So in order to do this I had to upgrade to enterprise version becuase standard version does not have this option... only I can't remember what the option is now, to be able to set it up. I distinctly remember going to the MS ISA website and checkign out the features and seeing that it was not available in the standard version only the enterprise version, hence the update now that the summer upgrades are underway. thanks
< Message edited by keswadmin -- 5.Aug.2008 2:03:28 PM >
|
|
|
|
RE: What is the feature called please... - 5.Aug.2008 2:52:58 PM
|
|
|
keswadmin
Posts: 3
Joined: 4.Aug.2008
Status: offline
|
OK - maybe this is a better way of explaining it. I have the following groups already in use in AD called, Staff, 1st form, 2nd form, 3rd form, 4th form, 5th form, L6th form and U6th form. I want to all staff who live in site to have access to the internet 24/7 I want the 1st and 2nd years to only have access between 8am and 8pm 3rd form to have access 8am to 9pm 4th and 5th form 8am to 10pm L6 and U6 to have access 7am til 11:30pm. Where possible I want to continue with the windows authentication that is currently used, but there are a number of laptops that are not on the school domain, but have been given access to teh school network when they have been authorised. These machine must prompt for a school username and password before internet acceess is to be given and then only according to the year group that they are in (or staff). thanks in advance.
|
|
|
|
RE: What is the feature called please... - 6.Aug.2008 6:16:54 PM
|
|
|
tshinder
Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online
|
quote:
ORIGINAL: keswadmin Sorry, you mis-understand me or else I can not explain myself... just me I expect The feature I am after that allows me to set the times of access for each of my AD groups is only available on the enterprise edition. This is so that each of the groups - already in existance on AD - can have usage hours for internet access, to prevent student access to the internet after hours when they put a network cable into their laptops. (The wireless system will decide which group they are in already and prevent access to any network resource by restricting access at certain hours of the night. regretfully it does not work for LAN cards only wireless cards.) So in order to do this I had to upgrade to enterprise version becuase standard version does not have this option... only I can't remember what the option is now, to be able to set it up. I distinctly remember going to the MS ISA website and checkign out the features and seeing that it was not available in the standard version only the enterprise version, hence the update now that the summer upgrades are underway. thanks Applying a schedule to a rule is available with Standard edition too. It's part of the properties of the Access Rule. HTH, Tom
_____________________________
Thomas W Shinder, M.D. Sr. Consultant/Technical Writer Prowess Consulting http://www.prowessconsulting.com/ Blog: http://blogs.isaserver.org/shinder/ GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
RE: What is the feature called please... - 6.Aug.2008 6:19:02 PM
|
|
|
tshinder
Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online
|
quote:
ORIGINAL: keswadmin OK - maybe this is a better way of explaining it. I have the following groups already in use in AD called, Staff, 1st form, 2nd form, 3rd form, 4th form, 5th form, L6th form and U6th form. I want to all staff who live in site to have access to the internet 24/7 I want the 1st and 2nd years to only have access between 8am and 8pm 3rd form to have access 8am to 9pm 4th and 5th form 8am to 10pm L6 and U6 to have access 7am til 11:30pm. Where possible I want to continue with the windows authentication that is currently used, but there are a number of laptops that are not on the school domain, but have been given access to teh school network when they have been authorised. These machine must prompt for a school username and password before internet acceess is to be given and then only according to the year group that they are in (or staff). thanks in advance. Just create an access rule for each of the groups. Then set the schedule within the Properties of each rule. Keep in mind that the schedule will not drop existing connections, it will only prevent new connections for the period that you do not want them to connect. You'll need to restart the firewall service to drop the existing connections. HTH, Tom
_____________________________
Thomas W Shinder, M.D. Sr. Consultant/Technical Writer Prowess Consulting http://www.prowessconsulting.com/ Blog: http://blogs.isaserver.org/shinder/ GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|