Re: Site and content rules

From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 04/30/04


Date: Thu, 29 Apr 2004 18:45:18 -0700

No,
What you have described is suitable only if you want to
support anonymous users on specific machines with assigned
IP addresses.

If you goal is to manage Internet access based on Windows
logon no matter what machine the User may use, you should
not reference client sets, you should reference a Windows
security group which contains your Windows User accounts.

Make sure that a matching Protocol rule is created which
also references your Windows security group and your Users
will be granted access.

Lastly, doublecheck you don't have a Default rule that
permits all Users access to everywhere (Either or both
Site & Content and Protocol rules).

Tony Su

>-----Original Message-----
>Hi,
>
>1. creat a client address sets that include the clients
can access the
>internet named "access internet"
>2. in the site and content rule, add a new rule to allow
access internet,
>and apply to the client address set that you created.
>
>Also you can see below:
>http://www.microsoft.com/resources/documentation/isa/2000/
enterprise/proddocs/en-
us/isadocs/m_p_h_createproxyrule.mspx
>
>--
>==============
>Kenny Wu
>Taiwan
>MCSE, MCSA
>==============
>"Brady Snow" <Bradys@lmctx.com>
>???????:60df01c42e20$4bdf8ef0$a401280a@phx.gbl...
>> I have a Windows 2000 Domain with an ISA server running
on
>> Windows 2000. I am trying to set up a rule where nobody
>> has access to external websites unless they are in the
an
>> internet access group that we created. Can someone
point
>> me in the right direction. Maybe somwhere I can get
>> information on "How to" do this.
>>
>> Many thanks,
>>
>> Brady Snow
>> McKinney, Texas
>
>
>.
>



Relevant Pages

  • Problems with OWA login from W2K
    ... Windows 2000 Pro SP4 machines and Windows XP Pro SP2 machines. ... 2003 client as well as our SharePoint intranet runs without problems on ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall Client Deployment
    ... I am deploying ISA Server's Firewall Client 2006 to client machines ... Windows XP Professional SP2. ...
    (microsoft.public.isa.clients)
  • Re: How to add site boundaries programmatically?
    ... Windows 98 machines won't install the client unless the ... We've been using a virtual switched network here that makes it look ...
    (microsoft.public.sms.admin)
  • Re: MS Outlook is "hijacking" email over OE!
    ... I'm surprised the problem isn't> more widespread...its happened on two of our machines> with different office and windows versions, and we aren't> doing anything too out of the ordinary! ... >>>>Make OE the default e-mail client: ... >>> We use Outlook Express for our email. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: [long rant] Call this a f**king OS...
    ... it is a bloody Windows rant. ... Both machines happily talk to the wireless router and access the ... network that has been happily functioning for 3 years now. ... I have no idea why and the client is ...
    (uk.comp.sys.mac)