Re: SBS ISA2004 allows all users internet access, why?

and you have confirmed that only the SBS Internet Users are the only group
allowed in the SBS Internet Access Rule in ISA2004?

"Rich R" <RichR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1A62214F-855D-45D1-948F-39D44AEC70C8@xxxxxxxxxxxxxxxx
> no, see, that's the point. ;)
>
> i HAD rules in place, SBS 2000 out of the box only allows members of the
> Internet Users to have access to the web proxy. that's the way i kept it,
> only senior members of staff were put into the INternet Users group, to
> stop
> marketing staff and part time staff browsing instead of selling.
>
> after the upgrade (done as per the MS instructions) it's now allowing
> everyone access, seemingly regardless of what rules i play with.
>
> the is just the web proxy i'm referring to, we dont use the firewall
> client,
> all other traffic from the workstations is blocked.
>
> does that explain my problem better? i know i rambled a bit!
>
> "AllenM" wrote:
>
>> Kind of a redundant question but if you have no rules applied to limit
>> internet access what difference does it make whether All User or SBS
>> Internet Users have internet access?
>> I had some issues with internet access after my ISA 2004 upgrade. I could
>> not get to the newsgroup via OE so I had to put All Users and remove
>> internet users from my SBS Internet Access Rule. I do not have limited
>> internet access applied to anyone so it didn't make a difference to me.
>> Check your users for the SBS Internet Access Rule.
>>
>>
>> "Rich R" <RichR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:0BE9D7E3-3C36-4ECA-A693-5D6F68C7AACE@xxxxxxxxxxxxxxxx
>> > hi,
>> >
>> > i've upgraded our SBS 2003 premium with SP1 using the disks purchased
>> > from
>> > microsoft.
>> >
>> > after removing the 40 connections limit which created carnage with our
>> > network, why this is default on SBS i'll never know, i've found that
>> > now
>> > all
>> > users of the network can browse the internet, as opposed to the SBS
>> > Internet
>> > users only as it was before the upgrade.
>> >
>> > i consider myself very knowledgable on these things, but for the life
>> > of
>> > me
>> > i can identify what's causing this to happen.
>> >
>> > weird things i've noticed - all my custom rules got amened to TCP
>> > 0-65534,
>> > applied to all users. not a successful conversion! anyhow, i've tried
>> > disabling them and then removing them to no avail, still everyone has
>> > access.
>> >
>> > since i didnt install this from scratch (i.e it's an SBS upgrade) then
>> > i'm
>> > not familiar with the "start locked down and open from there". this
>> > interface
>> > doesnt make much sense to me at this time, and its a live system where
>> > (relevent) people need access to the internet pretty much all the time.
>> >
>> > so, what's the method /rule / policy that would allow only "SBS
>> > Internet
>> > Users" access to the web proxy?
>> >
>> > points to note: ISA server is on a single network adapter. currently an
>> > external firewall is in place to block access out. please dont lecture
>> > me
>> > about using ISA as a full firewall, i know, and i will change it after
>> > i've
>> > migrated from SBS. which wont happen until everything is stable.
>> >
>> > so to be clear, i'm only using it for controlled web proxy access and
>> > caching!
>> >
>> > i've not found anything on the web or support or help that documents
>> > this
>> > simple feature request.
>> >
>> > here's hoping someone can help here!
>> >
>> > cheers
>> > Rich R
>>
>>
>>


.

Relevant Pages

  • Re: Update SBS Without Disturbing Existing Network
    ... In a two NIC scenario the router will think all traffic is from the SBS, ... will not be able to use it to limit internet access by machine behind SBS. ... The router is a Linksys BEFSX41 router/firewall. ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet access control on SBS 2003
    ... | Content-Class: urn:content-classes:message ... | I have SBS 2003 installed on a Dell 2650 with a hardware ... and now the internet access is so ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy - Restrict Internet Access by OU?
    ... you could not find ISA on SBS 2003, you can use SBS premium technology disk ... to install ISA server. ... restrict internet access on special user group. ...
    (microsoft.public.windows.server.sbs)
  • RE: Too slow on Internet Access
    ... slow when the client computers access internet though SBS? ... would you please help me confirm if you have configured SBS as ... DNS Service as the DNS Server. ... 825763 How to configure Internet access in Windows Small Business Server ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 - Internet Access without using Firewall Client
    ... you can not install ISA firewall client on mobile laptops but meanwhile ... we can make the laptops to access Internet without ... ISA server on SBS only allows domain user access Internet. ... How to configure Internet access in Windows Small Business Server 2003 ...
    (microsoft.public.windows.server.sbs)
Loading