Re: Internet access granted to local client users.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Lee Li[MSFT] (leelili_at_online.microsoft.com)
Date: 03/14/05


Date: Mon, 14 Mar 2005 06:58:22 GMT

Dear Andy,

Thank you for posting.
whether a local user account can connect to the Internet or not is based on
your ISA server's configuration.
Generally speaking, you need to configure the following settings to only
allow the domain user account:

1. Select the "Ask unauthenticated users for identification" option, you
can take a look at the following URL for more inforamtion:
http://www.microsoft.com/resources/documentation/isa/2000/enterprise/proddoc
s/en-us/isadocs/cmt_h_authrequire.mspx

2. To all the allow rules that you had created, make sure that had applied
to the users and groups.
(Double click on the rules that you had created, click the applies to tab
and set the option of "users and groups specified below")

If you did not set the above options, it is a normal behaviour for the
local user account to connect to the Internet.
For detail steps to set the ISA rules, please take a look at the following
URL:
http://www.microsoft.com/resources/documentation/isa/2000/enterprise/proddoc
s/en-us/isadocs/m_p_c_proxyrulesintro.mspx

For the firewall client, you can take a look at the following URL:
http://www.microsoft.com/resources/documentation/isa/2000/enterprise/proddoc
s/en-us/isadocs/cmt_chckwspclient.mspx

Hope the above information helps. Have a nice day!

Sincerely,
 
Lee Li
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: Internet access granted to local client users.
    ... > whether a local user account can connect to the Internet or not is based ... > local user account to connect to the Internet. ... > Microsoft Online Partner Support ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 / User Internet Access
    ... Frank McCallister SBS MVP ... > Everything is definately working except for this one user account and ... > the internet, regardless of what client machine they are using (we have ... >> Not sure why you spent extra money for separate ISA when you have ISA ...
    (microsoft.public.windows.server.sbs)
  • Re: Anonymous Authentication Issues..Please Help!
    ... Internet" by IE which causes it to be sent to ISA when it should never be ... Background information on the root of your problem: ... The issue is that the backend user account seems to be read by ISA ...
    (microsoft.public.isaserver)
  • Re: SBS 2003 / User Internet Access
    ... Everything is definately working except for this one user account and ... the internet, regardless of what client machine they are using (we have ... Frank McCallister SBS MVP wrote: ... > Not sure why you spent extra money for separate ISA when you have ISA ...
    (microsoft.public.windows.server.sbs)
  • Re: Auto-update of an application, permission problem in "Program Files"
    ... is a filted normal user account token by default. ... normal user write permission to the "Program Files" directory. ... Microsoft Online Community Support ...
    (microsoft.public.win32.programmer.kernel)