synaesthesia Posted March 22, 2012 Posted March 22, 2012 Hi folks, Got a Forefront TMG running as a filter until our new broadband supplier comes in October (or possibly sooner). I've tried to take out pretty much *everything* so it's running purely as cache and URL filtering. However, it appears to struggle every now and then (daily, unfortunately) with client authentication - we get errors in the TMG console saying that clients are slow to authenticate. Anyone had this and managed to overcome it? Server isn't exactly a powerhorse, it's just a G4 HP ML110, 2008R2, Xeon 3040, 6gb ram and SATA disks (separate for boot and cache). Gigabit network connection, it's on the domain, authentication is "integrated" as we don't want to have to have people enter usernames and passwords again, but naturally when it is slow to auth, it does ask for this information. CPU is barely being touched, ditto for network and disk.
TheScarfedOne Posted March 23, 2012 Posted March 23, 2012 Ive found it can be a pita like this... but in my case, was doing worse - not prompting and just saying "NO". Was one fix, a regfrag forcing Kerberos off so that it had to use NTLM. I will track it down from my GPOs and post it... 1
synaesthesia Posted March 26, 2012 Author Posted March 26, 2012 Any joy with that fragment, @TheScarfedOne ?
TheScarfedOne Posted March 26, 2012 Posted March 26, 2012 Flip - completely forgot! Sorry....! Here it is... HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ EnableNegotiate (DWORD) - set it to 0 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now