Internet Access for Generic Accounts through ISA Server 2004

AckWeblog

AckWeblog — Wed, 31 Jan 2007 02:31:42 GMT

PingBack from http://ack.leblogs.info/article/693057/Internet-Access-for-Generic-Accounts-through-ISA-Server-2004/

re: Internet Access for Generic Accounts through ISA Server 2004

Tom Shinder — Wed, 31 Jan 2007 19:29:59 GMT

Hi Yuri,

Very nice article! I appreciate the effort it took to write and it will benefit many ISA Firewall admins.

Thanks!

Tom

re: Internet Access for Generic Accounts through ISA Server 2004

Yuri Diogenes — Thu, 01 Feb 2007 17:07:22 GMT

Thanks for the comment Tom, is always a pleasure to help the ISA community. Your articles and books are also very appreciated and important to the community.

Thanks,

Yuri

re: Internet Access for Generic Accounts through ISA Server 2004

martin — Wed, 11 Apr 2007 16:20:46 GMT

Yuri, or others:

Is there any way to change the behaviour, when ISA server asks for credentials when there is an locally logged in user at some worskation trying to browse using ISA web proxy?

Because I need to set up an environmnet where locally logged on users have internet access disabled and they can not supply the credentials to the ISA server. (In other words, they have to log off and log on using domain account if they wish to browse internet).

Thanks a lot for reply

re: Internet Access for Generic Accounts through ISA Server 2004

Yuri Diogenes — Tue, 01 May 2007 02:37:05 GMT

Hi Martin,

Sorry for the delay to answer. One way to accomplish data is by Group Policy. Disable the IE process on the local computer for the local account and allow the IE to be executed via Domain Account.

Another way to do that is to configure the IE via local policy to use a fake proxy and disable the ability to change the IE properties for the local user. When he logs on via domain user account he gets the correct policy via GPO.

It is better to control that via Group Policy than ISA itself.

I hope this help.

Yuri Diogenes

re: Internet Access for Generic Accounts through ISA Server 2004

Kevin — Thu, 19 Jul 2007 22:02:01 GMT

Hi. VERY nice and informative site. I have a problem here at our business. I am the network admin and we have ISA 2004 installed on a server2003 machine, which also runs Surfcontrol. Our users are sporadically getting windows authentication prompts when attempting to go out to the web. ISA is set with integrated authentication and all users are in a group that is allowed internet access. This doesn't happen very often, but when it does we find that simply logging the user off, restarting the PC, and logging back on gets them the ability to get out to the web. I know that one user in particular had left her account logged on over the past night. Wasn't sure if this had an effect. This is confounding. Any ideas?