Welcome to ISAserver.org

surfcontrol username multiple domain

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Misc.] >> 3rd Party Add-ons >> surfcontrol username multiple domain

Page: [1]

Message

<< Older Topic Newer Topic >>

surfcontrol username multiple domain - 27.Oct.2005 2:20:00 PM

pdesroches

Posts: 27
Joined: 7.Jun.2005
From: Montreal
Status: offline

Hi,

We have a school setup where isa is connection to 3 domains, one domain for admin, one domain for student and one domain where the other domain only have a one way trust to share files.

Isa is a member of this third domain and since this domain have 1 way trust to the other two, I can see users of both of these domain.

No I want to be able with surfcontrol to do some audit on some users. All I have right now in the monitor is IP adress. I have read to have username I have to setup my access rule to allow only authenticated user.

What happen is that none of my users are member of this third domain, ao when I want to go on a web site I get the explorer login popup.

Is there a solution to my problem ?

Thanks a lot

Patrick

Post #: 1

Featured Links*

RE: surfcontrol username multiple domain - 3.Nov.2005 6:13:00 AM

rralston

Posts: 17
Joined: 22.Jul.2002
From: Boston, MA
Status: offline

If I understand your settup correctly, your ISA domain has a one way trust to the other domains, where ISA trusts the other domains.

In this configuration, in your access rule, you must add an ISA defined user group, which is populated with the users from the trusted domains. Typically you would do this by adding the appropriate security groups from the trusted domains. Without this, ISA is attempting to authenticate against its own domain and presents a credentials dialogue when it cannot find the user.

(in reply to pdesroches)

Post #: 2