Re: Proxy Authentication
- From: "ZVR" <nospamever@xxxxxx>
- Date: Thu, 15 Sep 2005 12:56:39 -0400
OK, here's how you do it in ISA2000:
-open ISA Management console
-right click on the server name, choose "Properties"
-go to the "Outgoing Web Requests" tab
-under "Connections" uncheck "Ask unauthenticated users for identification"
Now, I'm not sure if that'll help you or not, since you are using ISA2000.
When I was using ISA2000 I didn't have to do this (as opposed to ISA2004)...
but it's worth a try I guess.
Virgil
"Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
news:9F040423-995B-417D-AE56-0985AB768AD8@xxxxxxxxxxxxxxxx
> Actually the update was not a test...lol...but I was literally trying to
> get
> out and get the updates for this new machine. (I say new machine, a
> windows
> 2000 machine upgraded to XP Pro SP1 , then SP2, now doing the updates, all
> 37
> of them... :) )
>
> But in any case that was where I was prompted...just going to the home
> page.
>
> When I tried another page, it worked just fine. And when I clicked cancel
> in the MS Update page where I was being prompted, I was able to continue.
>
> In answer to the version, I am running ISA 2000, and have not had the
> courage to go to 2004...yet.. :)
>
> J
>
> "Phillip Windell" wrote:
>
>> Don't use Microsoft Updates as the "test site". Microsoft Updates
>> already
>> has known issues with not working via CERN Compliant Web Proxys when
>> authentication is required. Find a simple, uncomplicated, low-scripted,
>> no-popup site to use as the test site.
>>
>>
>> --
>> Phillip Windell [MCP, MVP, CCNA]
>> www.wandtv.com
>> -----------------------------------------------------
>> Understanding the ISA 2004 Access Rule Processing
>> http://www.isaserver.org/articles/ISA2004_AccessRules.html
>>
>> Microsoft Internet Security & Acceleration Server: Guidance
>> http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
>> http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp
>>
>> Microsoft Internet Security & Acceleration Server: Partners
>> http://www.microsoft.com/isaserver/partners/default.asp
>> -----------------------------------------------------
>>
>>
>>
>> "Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
>> news:ED071678-B103-4D3C-B9E3-D07A14F85938@xxxxxxxxxxxxxxxx
>> > Thanks again... so I just was prompted as an Admin, going to Microsoft
>> > Updates sites, it seems that I am starting to see this more and more.
>> >
>> > Could you give me better direction for the ISA setting that you
>> > mentioned
>> in
>> > one of your previous posts...I went hunting but did not see it in ISA
>> > Management...
>> >
>> > Thanks
>> > J
>> >
>> > "ZVR" wrote:
>> >
>> > > No. Not all of them will be affected. I can't tell you what's the
>> criteria -
>> > > there is no official article from MS yet explaining this behavior,
>> however I
>> > > suspect we will see a fix for it in a future Service Pack for ISA.
>> > >
>> > > I can only tell you that I've seen the same thing happening several
>> times so
>> > > far at various customers / sites and the solution was always the one
>> > > I
>> > > mentioned. I don't know if it applies to you or not, you might have a
>> > > different issue after all, but it's worth a try if your configuration
>> > > is
>> the
>> > > one described.
>> > >
>> > > Virgil
>> > >
>> > >
>> > > "Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
>> > > news:17C5153C-63FB-4A8D-81A1-9B4E4D5CFC02@xxxxxxxxxxxxxxxx
>> > > > Thanks for the info...I have one question, why does this behavior
>> > > > only
>> > > > happen
>> > > > to this one user? It would seem that if this were the case all of
>> > > > my
>> web
>> > > > users wouldbe getting the same issue?
>> > > >
>> > > > J
>> > > >
>> > > > "ZVR" wrote:
>> > > >
>> > > >> In the configuration of the "Internal" network object, under the
>> > > >> Web
>> > > >> Proxy
>> > > >> tab, in the "Authentication" window, do you have the "Require all
>> users
>> > > >> to
>> > > >> authenticate" option checked?
>> > > >>
>> > > >> If you do, disable it and your problems will go away. In case you
>> > > >> are
>> > > >> concerned about users browsing anonymously through the web proxy
>> service,
>> > > >> just don't create any firewall rule allowing browsing to "All
>> Users" -
>> > > >> rather, specify a group, that can even be "Domain Users" or
>> > > >> whatever,
>> > > >> just
>> > > >> don't leave rules with "All Users" as that will allow anonymous
>> traffic.
>> > > >>
>> > > >> Virgil
>> > > >>
>> > > >>
>> > > >>
>> > > >> "Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
>> > > >> news:9C4A09EC-2486-4B76-8DAD-20767F08A111@xxxxxxxxxxxxxxxx
>> > > >> > Okay, forget the profile, because not it totally does not work.
>> > > >> > I
>> > > >> > deleted
>> > > >> > the user profile, had them sign into a different machine, this
>> > > >> > time
>> a
>> > > >> > windows
>> > > >> > XP SP2 machine, and as soon as they attempt to connect to the
>> internet
>> > > >> > they
>> > > >> > are prompted for authentication.
>> > > >> >
>> > > >> > If I enter the admin credencials, the browser just sits there,
>> thinking
>> > > >> > about going, and is reporting that it is detecting proxy setting
>> > > >> > in
>> the
>> > > >> > status bar.
>> > > >> >
>> > > >> > Any ideas? ISA is still prompting for authentication...
>> > > >> >
>> > > >> > Smurfman
>> > > >> > ""Lee Li[MSFT]"" wrote:
>> > > >> >
>> > > >> >> Dear Smurfman,
>> > > >> >>
>> > > >> >> Thank you for posting.
>> > > >> >>
>> > > >> >> First I want to let you know that you cannot delete the user
>> profile
>> > > >> >> is
>> > > >> >> because you have enabled "Grant the user exclusive rights to My
>> > > >> >> Documents"
>> > > >> >> in group policy.
>> > > >> >> So you will have to take ownership of the folder to delete the
>> > > >> >> profile:
>> > > >> >> You can take a look a look at the following URL for more
>> information:
>> > > >> >> 288991 Enabling the administrator to have access to redirected
>> folders
>> > > >> >> http://support.microsoft.com/?id=288991
>> > > >> >>
>> > > >> >> Since the issue can be resolved by deleting the user profile,
>> > > >> >> the
>> > > >> >> issue
>> > > >> >> is
>> > > >> >> not related with the Proxy or ISA firewall.
>> > > >> >> If the problem is caused by the ISA configuration, the problem
>> will
>> > > >> >> remain
>> > > >> >> after you change the user profile on the local computer.
>> > > >> >> Regarding this issue, I recommend you to post the issue in the
>> > > >> >> Windows
>> > > >> >> NT
>> > > >> >> 4 newsgroup to check the issue further.
>> > > >> >> We recommend posting appropriately so you will get the most
>> qualified
>> > > >> >> pool
>> > > >> >> of respondents, and so other partners who regularly read the
>> > > >> >> newsgroups
>> > > >> >> can
>> > > >> >> either share their knowledge or learn from your interaction
>> > > >> >> with
>> us.
>> > > >> >>
>> > > >> >> Have a nice day!
>> > > >> >>
>> > > >> >> Sincerely,
>> > > >> >>
>> > > >> >> Lee Li
>> > > >> >> Microsoft Online Partner Support
>> > > >> >>
>> > > >> >> When responding to posts, please "Reply to Group" via your
>> newsreader
>> > > >> >> so
>> > > >> >> that others may learn and benefit from your issue.
>> > > >> >> =====================================================
>> > > >> >> Business-Critical Phone Support (BCPS) provides you with
>> > > >> >> technical
>> > > >> >> phone
>> > > >> >> support at no charge during critical LAN outages or "business
>> down"
>> > > >> >> situations. This benefit is available 24 hours a day, 7 days a
>> week to
>> > > >> >> all
>> > > >> >> Microsoft technology partners in the United States and Canada.
>> > > >> >>
>> > > >> >> This and other support options are available here:
>> > > >> >> BCPS:
>> > > >> >>
>> https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
>> > > >> >> Others:
>> > > >> >> https://partner.microsoft.com/US/technicalsupport/supportoverview/
>> > > >> >>
>> > > >> >> If you are outside the United States, please visit our
>> International
>> > > >> >> Support page:
>> > > >> >>
>> http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
>> > > >> >>
>> > > >> >> =====================================================
>> > > >> >> This posting is provided "AS IS" with no warranties, and
>> > > >> >> confers
>> no
>> > > >> >> rights.
>> > > >> >>
>> > > >> >>
>> > > >>
>> > > >>
>> > > >>
>> > >
>> > >
>> > >
>>
>>
>>
.
- Follow-Ups:
- Re: Proxy Authentication
- From: Smurfman
- Re: Proxy Authentication
- References:
- Re: Proxy Authentication
- From: "Lee Li[MSFT]"
- Re: Proxy Authentication
- From: ZVR
- Re: Proxy Authentication
- From: Smurfman
- Re: Proxy Authentication
- Prev by Date: Re: Proxy Authentication
- Next by Date: Re: ISA Reporting by Time ?
- Previous by thread: Re: Proxy Authentication
- Next by thread: Re: Proxy Authentication
- Index(es):
Relevant Pages
|
Loading
