Re: NTLM Proxy locking user account

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Proxy is made by Bluecoat, & you load proxy agent on the server that will
autenticate user via ntlm against the AD domain when they try to access web.

Thanks again

"Al Mulnick" wrote:

Just to be sure we're talking the same language, your NTLM proxy - what is
the exact name of it and version?

Al


"Pete" <Pete@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:42FC4E2E-420D-4EAC-B2A5-3CA36AB57C3A@xxxxxxxxxxxxxxxx
AL,
Thanks for your response....

Sorry just found the logs on server that is running the agent for NTLM
proxy. I was getting successful autentication event id: 680 on the DC &
failure were not showing up there. My question would why the failures are
only showing up on the Server that is running the agent & not on DC.


Have both Default Domain & Default Domain controller policy turned on for
audit logs.


Thank You,

"Al Mulnick" wrote:

You turned on the auditing where? On the domain controllers?




"Pete" <Pete@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4AF9B05A-E2C9-4C62-AD0D-A4DC71C74A05@xxxxxxxxxxxxxxxx
Hello All,

Hoping to find some answers to this problem. We have NTLM proxy in our
network, every so often users get prompted to login into NTLM proxy in
order
for them to access particular site (ex: windows update). If a user
happens
to
just put their userid without domain & pwd, their account gets locked.
We
are
not seeing any logs under security event viewer on the domain.

We have turned on success, failure policy settings for all audit item
except audit directory service access-- which is set to no auditing.

How is it possible that this ntlm proxy is able to lock out user
account
without generating a log?


Thanks in advance for your insight & help.....
Pete







.

Relevant Pages

  • Re: Error: HTTP/1.1 407 Proxy Authentication Required
    ... It appears that the tool supports server auth, ... Scan through their FAQ and see what they say about proxy authentication. ... It has some built in http tests that supports NTLM ...
    (microsoft.public.isa)
  • Re: NTLM over the Internet
    ... which suggests that certain proxy servers just don't support NTLM. ... Keep searching the link above or revise my ... I've setup a test server using ntlm ...
    (microsoft.public.inetserver.iis.security)
  • Problems configuring SQL Server Agent Proxy
    ... I am attempting to set up the Agent Proxy to allow users to run jobs ... I had the proxy up an working before SP3. ... Opening up the Job Systems tab of the SQL Server Agent properties ...
    (microsoft.public.sqlserver.security)
  • Re: Error: HTTP/1.1 407 Proxy Authentication Required
    ... They do support proxy authentication. ... Proxy Caching - Turn on or off the use of caching at the HTTP proxy server. ... Scan through their FAQ and see what they say about proxy authentication. ... It has some built in http tests that supports NTLM ...
    (microsoft.public.isa)
  • Re: svn checkout via a web-browser?
    ... If you control the web server itself, ... > The company network is run by Windows. ... I'm getting in late in this thread, but the "windows proxy" thing caught ... But epiphany understands NTLM, and I presume that TortoiseSVN does too. ...
    (Debian-User)