Smoothwall- No internet access through Terminal Server

[ChrisH]

Our Network Guardian is suddenly stopping everyone from accessing the internet through our terminal server. This is the error message:

 

from this cache because you are not logged in or your user group does not have permission to web browse

 

If you try on the computer itself then there isn't a problem and it went through first time. So I know it's nothing to do with the users group.

 

The only thing that has changed recently on the terminal server is we swopped from per device to per user licencing as it's only the staff that use it all over.

 

Any ideas

 

tia

 

Chris

[ChrisH]

I am glad to see I have stumped everyone as usual

[FN-GM]

Have you not got some support with smoothwall?

[ssiruuk2]

Are your users being mapped into the correct group when they are trying to go through smoothwall in their RDP sessions? Have a look on your smoothwall when you send some test web requests from an RDP session.

 

You might find they are being dumped into unauthenticated ips group and that is probably set to not be allowed through the proxy (purely guessing here) - check "Groups allowed to use web proxy" in :

 

Guardian > Authentication

 

What kind of authentication are you using? NTLM identification / authentication with terminal services compatibility?

Edited March 15, 2010 by ssiruuk2

[ChrisH]

My support has run out for now.....

 

I have seen this before but I can't find it now

 

NTLM identification / authentication with terminal services compatibility

 

Where about is it located?

 

When I try and look at the log they dont seem to appear at all from the RDP session but appear fine on a normal session.

 

I will have a look again tomorrow when my head is a little clearer.

[ssiruuk2]

go into Guardian and then the Authentication link below that.

 

Here you specify what authentication type you are using (Im using NTLM ident with Terminal services compatibility) and our thin clients are ok going through the proxy.

 

Check your group settings on unauthenticated ips like I suggested above and for a quick fix choose "Yes - filtered" (allowed through proxy) fix the grouping / auth issue later at least people will be able to get online.

 

I suspect your users are being dumped into that group.

Edited March 15, 2010 by ssiruuk2

[ChrisH]

It was a GPO setting in the end. Some setting in the OU that the servers were in was stopping NTLM happening. I have moved the server to a different OU and everything is fine .

[Ric_]

It was a GPO setting in the end. Some setting in the OU that the servers were in was stopping NTLM happening. I have moved the server to a different OU and everything is fine .

 

And now you can get Liz to add each one in, one at a time to find the one that broke it

[ChrisH]

I'm pretty sure I know which section it is in but the server was is an a more suitable location now