RE: Company Web will not work when ISA authentication is turned on

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi Jonathan,

Thank you for posting in SBS newsgroup.

From the description, I understand that after you check the "Require all
users to authenticate" option on the ISA Server 2004, the companyweb is
inaccessible for the internal users. If I have misunderstood your concerns,
please do not hesitate to let me know.

Before we go any further, I would like to suggest you re-run the CEICW
Wizard. The wizard will automatically configure the settings for IIS and
ISA. You can refer to the detailed steps in the following KB article:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Based on my experience, once we enable the "Require all users to
authenticate" option in Networks->Internal->Web Proxy->Authentication, all
the outgoing web traffic which go through the ISA web proxy engine will be
required to authenticate. If all your internal users have joined the
domain, the problem may be caused by the following
possibilities:

1. Web Proxy client

Please double check if the LAN computers have been configured as both web
proxy client and firewall client:

To be a Web Proxy client, please open IE, click Tools->Internet Options,
and click Connections->LAN Settings, configure ISA server as your Proxy
server (you can enter either the computer name or the internal IP of the
ISA server, port 8080 by default.)

To be a Firewall client, the workstation needs to have the ISA Firewall
Client software installed.

2. IIS settings

Please double check the following settings to make sure that the IIS is
correctly configured:

1) Open the IIS management console, navigate to Web Sites->companyweb,
right click it and select Properties.

2) Go to the Web Site tab, make sure the internal IP address of the SBS
Server is listed, then click Advanced, make sure that we have the following
two identities for the web site:

Internal IP/80/companyweb
Internal IP/80/companyweb.domain.local

Note: If the first record is missing, this website will no longer be
accessed via http://companyweb.

3) Go to the Directory Security tab, click Edit under Authentication and
access control, make sure only "Integrated Windows Authentication" is
enabled.

4) Please type "iisreset" (without quotation mark) after modifying any
settings.

3. DNS record

Please double check the DNS Server, ensure that there exists a CNAME for
"companyweb" whose host record can be resolved to the internal IP address
of the SBS Server.

4. Loop Back

The problem may also occur when the traffic is looping back through the ISA
proxy engine. Please perform the following steps to add "companyweb" to the
Exception list.

1) On the internal client, open Internet Options | Connections tab | LAN
Settings button.
2) Click Advanced tab, input companyweb into the Exceptions input box, and
then click OK 3 times.

After performing the above steps, please test the issue again, how will
things go?

Hope the above info helps. I appreciate your time and cooperation. Please
feel free to let me know if there is anything I can do for you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Company Web will not work when ISA authentication is turned
on
| From: =?Utf-8?B?Sm9uYXRoYW4gRHVuYmFy?=
<JonathanDunbar@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Company Web will not work when ISA authentication is turned on
| Date: Fri, 31 Mar 2006 03:00:32 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi
| I have found that when the ISA authentication is turned on the company
web
| stops working, any workaround for this would be great as we need to have
| authentication turned on for reporting.
| Thanks
|

.

Quantcast