Re: How to enable messenger for certain users?

Now that I think about it,...this may not work.

It is possible the "messenger users" will always match the first "special"
rule and will never get passed down to the next rule,...therfore they will
always be limited to the Sites you have listed and will never be allowed to
go anywhere else. So I think you will have to allow Mesenger users to go to
all of External.

So users can either user Messenger,...or they can't. You may not be able to
restrict Messenger to just certain sites.

Anyway, you can still try what I described in the pervious post and see if
you can get it to work,...but it may not be possible. I never try to get
that "picky" so I am a little unsure of the approach.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"Phillip Windell" <philwindell@xxxxxxxxxxx> wrote in message
news:eDxsknOZIHA.1184@xxxxxxxxxxxxxxxxxxxxxxx
Then you didn't create the "special" rule properly. It is too broad on
who is included on the Users Tab,...which causes it to "match" the rest of
the people's traffic attempts and thereby restricts them to only the sites
listed in the "To" Tab of that rule. Since their traffic "matches" the
rule they are never passed down to the rule below which is the one they
were supposed to use.

See first two link in my signature.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or
Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

"Habib" <Habib@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F36EE0CD-604B-4910-AF4D-A4BEBC16E7A1@xxxxxxxxxxxxxxxx
Hey so here is the scoop now, if i create a rule and put it on top of my
other rule and only allow certain users, then internet access is down for
everyone else. Anyone have any other ideas?

Thanks
Habib

"Habib" wrote:

Thanks Phillip that worked great.

Habib

"Phillip Windell" wrote:

Create a special HTTP Access Rule for "certain" users for "certain"
places
that does not have the signature restrictions in it.

Place this rule above the other one on the Rule List.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or
Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server
2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

"Habib" <Habib@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6AA04099-EBC9-4537-9E07-FCFFD76AE449@xxxxxxxxxxxxxxxx
I have an ISA 2004 firewall and previously I have allowed all users
to
uitilize messenger. We recently had some employees accept viruses
via
messenger so I have opted to lock it down completely. I have 1 rule
for
external internet access and configured my HTTP settings and set the
MSN/Live
Messenger signatures using KB925120.

However I need to enable certain users to be able to utilize
messenger to
communicate with external resources, does anyone have an idea how to
do
this?

Thanks
Hab







.

Relevant Pages

  • Re: How to enable messenger for certain users?
    ... Understanding the ISA 2004 Access Rule Processing ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa.configuration)
  • Re: Windows/Microsoft Update
    ... Understanding the ISA 2004 Access Rule Processing ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa)
  • Re: How do I block youtube or URLs
    ... Understanding the ISA 2004 Access Rule Processing ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa)
  • Re: Access Denied Redirect
    ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa.configuration)
  • Re: Web Proxy - SSL Tunnel Issue
    ... Understanding the ISA 2004 Access Rule Processing ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa)
Loading