RE: SBS 2003 Guest account

HI,

Thanks for updates.


For your convenience, I would like to give the detailed steps:

The easiest way is to install firewall client on the laptop user then you
can use firewall client to control the internet access, on this way user
will be able to access the internet no matter it joined the domain or not?
The firewall client software can be disable while out of the domain.

If you did not want to deploy firewall client software on the laptop user,
please follow the steps below:

ISA 2000:

1. Open ISA server managements.
2. Right click the SBS server node choose the properties.
3. On the Outgoing web request tab, make sure that "Ask unauthorized user
for identification is unechecked.
4. Restart the ISA services.

ISA 2004:

We suggest you run CEICW then all the user with the internal IP address
will be allow to access the internet by default, if you use ISA 2004 as
your proxy server on IE.

Hope the above information helpful, I am glad to be of further assistance.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: SBS 2003 Guest account
| thread-index: AcXQ87fAD3yykJG/Qb6aGuqNwAJjbA==
| X-WBNR-Posting-Host: 68.62.100.124
| From: =?Utf-8?B?TE1J?= <LMI@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <B8875919-B135-430A-AB53-C36832210C8D@xxxxxxxxxxxxx>
<EOj$TulvFHA.780@xxxxxxxxxxxxxxxxxxxxx>
<7C8436C7-95DF-4566-B979-7F9468FE8C93@xxxxxxxxxxxxx>
<$00qSswvFHA.2128@xxxxxxxxxxxxxxxxxxxxx>
<37DBD62C-0392-41AA-84FE-57450AD0C543@xxxxxxxxxxxxx>
<rhPm$LJ0FHA.1172@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: SBS 2003 Guest account
| Date: Fri, 14 Oct 2005 12:16:02 -0700
| Lines: 305
| Message-ID: <4C08479E-CBB4-48AD-90A6-2BF1380DDAF3@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:161500
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| how can i uncheck this? wouln;dt i just check the proxy pass thru and
port
| number ?
|
| ""Charles Yang [MSFT]"" wrote:
|
| > HI,
| >
| > Thanks for updates.
| >
| > As I suggest in my previous post, if you have no ISA installed on your
SBS
| > domain, you can just use the DHCP server to assign the IP address for
your
| > laptop visitor, they do not need to do any things, they can just as the
| > proxy server on IE then they can access the internet from their laptop,
| > they will not be allowed to access the internal resources as they have
no
| > domain account, in this way you do not need to use guest account.
| >
| > If you have ISA installed on the SBS 2003, you need to uncheck "allow
all
| > users for authentication" then you can set proxy server on IE explore
on
| > laptop, so that they can view the internet without any further setting.
| > Also, you do not need to enable domain guest account.
| >
| > Hope the above information clear your issue. I am glad to be of further
| > assistance.
| >
| >
| >
| > Best regards,
| >
| > Charles Yang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: SBS 2003 Guest account
| > | thread-index: AcXQdlry9K33TzhjTmadUVSorCAYDw==
| > | X-WBNR-Posting-Host: 68.62.100.124
| > | From: =?Utf-8?B?TE1J?= <LMI@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <B8875919-B135-430A-AB53-C36832210C8D@xxxxxxxxxxxxx>
| > <EOj$TulvFHA.780@xxxxxxxxxxxxxxxxxxxxx>
| > <7C8436C7-95DF-4566-B979-7F9468FE8C93@xxxxxxxxxxxxx>
| > <$00qSswvFHA.2128@xxxxxxxxxxxxxxxxxxxxx>
| > | Subject: RE: SBS 2003 Guest account
| > | Date: Thu, 13 Oct 2005 21:18:40 -0700
| > | Lines: 264
| > | Message-ID: <37DBD62C-0392-41AA-84FE-57450AD0C543@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:161273
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | All i wan't to do is have them access the internet. I dont want to
put
| > them
| > | on the domain or anything. Is it as simple as configure the internt
| > | connection options on IE and inputting the proxy server?
| > |
| > | ""Charles Yang [MSFT]"" wrote:
| > |
| > | > HI,
| > | >
| > | > Thanks for updates.
| > | >
| > | > If you only want them to access the internet, you can refer to my
| > | > suggestion below:
| > | >
| > | > 1. As SBS standard edition, we have no control on internet, you can
| > just
| > | > set proxy on guest computer's IE, then they can access the internet
| > freely,
| > | > the other internal sources such RWW and OWA, they will be denied to
| > access.
| > | > 2. If you have SBS Premium Edition, by default we only allow the
user
| > that
| > | > belong to Internet user to access the internet, so I have following
| > | > suggestion:
| > | >
| > | > A. You can create a new security group called Visitor, make sure
that
| > you
| > | > use guest permission for this security group, add all the guest
user to
| > | > this security group then add the Visitor to be the member of
Internet
| > user
| > | > group,
| > | > ( To complete this, you can right click the security group, choose
| > | > properties, then navigate to "member of " section add the internet
user
| > to
| > | > the list)
| > | >
| > | > B. You can set a new rule for the security group on ISA to allow
the
| > | > security group to access internet.
| > | >
| > | > Hope the above information helpful, if you have any further
concerns,
| > | > please feel free to let me know. I am glad to help you.
| > | >
| > | >
| > | >
| > | > Best regards,
| > | >
| > | > Charles Yang (MSFT)
| > | >
| > | > Microsoft CSS Online Newsgroup Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > ======================================================
| > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > | > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | > You can locate the newsgroup here:
| > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | >
| > | > When opening a new thread via the web interface, we recommend you
check
| > the
| > | > "Notify me of replies" box to receive e-mail notifications when
there
| > are
| > | > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > please "Reply to Group" so that others may learn and benefit from
your
| > | > issue.
| > | >
| > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > | > provide other information for your reference, we recommend you post
| > | > different incidents in different threads to keep the thread clean.
In
| > doing
| > | > so, it will ensure your issues are resolved in a timely manner.
| > | >
| > | > For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | > check http://support.microsoft.com for regional support phone
numbers.
| > | >
| > | > Any input or comments in this thread are highly appreciated.
| > | > ======================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | >
| > | > =====================================================
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | > --------------------
| > | > | Thread-Topic: SBS 2003 Guest account
| > | > | thread-index: AcW+pR1i4/F+/ICeTU6dPzBDx5kG2A==
| > | > | X-WBNR-Posting-Host: 67.108.88.52
| > | > | From: =?Utf-8?B?TE1J?= <LMI@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | > | References: <B8875919-B135-430A-AB53-C36832210C8D@xxxxxxxxxxxxx>
| > | > <EOj$TulvFHA.780@xxxxxxxxxxxxxxxxxxxxx>
| > | > | Subject: RE: SBS 2003 Guest account
| > | > | Date: Wed, 21 Sep 2005 05:08:02 -0700
| > | > | Lines: 129
| > | > | Message-ID: <7C8436C7-95DF-4566-B979-7F9468FE8C93@xxxxxxxxxxxxx>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | > | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:155207
| > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | > |
| > | > | Ok sounds good but lets jsut say he wants to come in and use the
| > | > internet? I
| > | > | am using a proxy server to gain access to the internet but here
my
| > issue
| > | > i
| > | > | want to be abl e to have complete control over the user so that
when
| > he
| > | > leave
| > | > | he can no longer access anything. All i want him to access is the
| > | > internet.
| > | > |
| > | > | ""Charles Yang [MSFT]"" wrote:
| > | > |
| > | > | >
| > | > | > HI,
| > | > | >
| > | > | > Welcome to SBS newsgroup.
| > | > | >
| > | > | > Issue description:
| > | > | > ==============
| > | > | >
| > | > | > If I understand correctly, you want to know if you can use
guest
| > | > account
| > | > | > for the visitor who have a laptop and want to join the domain
| > | > temporally.
| > | > | >
| > | > | > Analyzing and suggestions:
| > | > | > ====================
| > | > | >
| > | > | > Generally speaking, your understanding is right, we use guest
| > account
| > | > for
| > | > | > visitor who wants to temporally use SBS domain. As I know, this
| > account
| > | > | > does not have any ability to use RWW OWA also companyweb, he
can
| > only
| > | > use
| > | > | > some domain shared resources. If you have ISA installed on the
SBS
| > | > 2003,
| > | > | > you will also be denied to use internet if you use ISA server
as
| > your
| > | > | > proxy, because this account does not belong to SBS internet
users.
| > | > | >
| > | > | > If you want to give the visitor's permission for only a guest
| > account,
| > | > you
| > | > | > can follow the steps below:
| > | > | >
| > | > | > 1. Open Add user wizard on Server managements.
| > | > | > 2. Choose do not use template to define users.
| > | > | > 3. In next pages select "Guest user"
| > | > | > 4. Finish the Wizard
| > | > | >
| > | > | > Then the user you create will belong to guest group, they will
be
| > only
| > | > have
| > | > | > to limited permission to access the domain internal resources.
They
| > do
| > | > not
| > | > | > have the ability to access the RWW companyweb and OWA.
| > | > | >
| > | > | > For your convenience, I would like to give you some article
refer
| > to
| > | > ADUC
| > | > | > configuration on Windows 2003, it will help you understand more
| > clearly
| > | > | > about the built in user in Windows 2003 domain:
| > | > | >
| > | > | > Account in Windows 2003
| > | > | >
| > | >
| >
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
| > | > | > rHelp/91a98c38-38c5-49dc-83bf-e69d8e1dbbfa.mspx
| > | > | >
| > | > | > Hope the above information helpful, please feel free to let me
| > know, I
| > | > am
| > | > | > glad to help you.
| > | > | >
| > | > | >
| > | > | > Best regards,
| > | > | >
| > | > | > Charles Yang (MSFT)
| > | > | >
| > | > | > Microsoft CSS Online Newsgroup Support
| > | > | >
| > | > | > Get Secure! - www.microsoft.com/security
| > | > | >
| > | > | > ======================================================
|

.

Relevant Pages

  • Re: RWW - Cant login
    ... MVPs do not work for Microsoft ... Must be a difference between Standard and Premium and ISA. ... In the Microsoft Internet Security and Acceleration Server 2004 console, ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 (no SP) - file saving over network suddenly very slow
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... >> the SBS server box? ... >> Norton Internet Security, Norton System Works, and Norton Anti-Virus etc. ...
    (microsoft.public.windows.server.sbs)
  • RE: CEICW KEEPS GIVING ERRORS
    ... The Web listeners used in rule "SBS Outlook via the Internet Web Publishing ... Right-click Default Web Site and click Properties, ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Loading Web Sites
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Have you installed ISA on the server box? ... Click Internet Protocl, and then click Properties. ...
    (microsoft.public.windows.server.sbs)
  • Re: Publishing folders on companyweb
    ... we can make the documents accessible from Internet. ... Microsoft CSS Online Newsgroup Support ... regarding other Microsoft products, you'd better post in the corresponding ...
    (microsoft.public.windows.server.sbs)
Loading