DamienG1121

Hi Mike, How did you set the Chrome Extension in GPO? Which Policy did you use I have the plugin rolled out just trying to roll out chrome extension. Thanks, Damien

Have tested it on a remote client not joined to our net work and it behaved how I wanted it to so I am a really happy bunny Thank you so much for your help

You guys are legends! Thank you so much I am hoping externally if Students and staff authenticate through TMG it should work correctly

Eureka that worked somehow forgot to GP Update Brilliant Internally that is spot on Is it able to work externally?

I have added that in their and still generates the same symptoms we use site to zone assignment list in Default Domain Policy.

I have followed what you said but now all I get is an authenticated box. Even added to trusted sites etc. I have attached screenshots of my TMG config as well as ADFS. I hope this helps..

So everything is set up on here now I have covered everything I think. I can get logged into this page manually absolutely fine by typing in the password. I just don't know what to look for for it to not require a password to sign on and just go straight through when I log onto my desktop in the morning. Done all IE checks moved ADFS onto a member server set up TMG to pass through and it does. I just am resigning to the dreadful line now of "I don't know".

Following on from earlier. I have since moved ADFS of the DC and installed it on a member server running 2012 R2. I am still somehow getting the same error.... Not sure what it could be..

On a member server can you have just the role installed and nothing else or do you have to DNS installed and all of that stuff. This is the first time I am setting all this up so it is really new ground.

It does yeah It shows the DN then shows the IP as the server. OOB scenario. It couldn't be because ADFS 3.0 role is installed on a DC that surely wouldn't cause the authentication problem would it. I would have thought it would all just link properly. Plus I thought Microsoft fixed it for Version 3.0. If it does I can try adding it as a member server and see how it roles. Just wondering now if it is a known bug... Thanks, Damien

It was all done before I started working here. It's not something I tend to touch I have tested using IE 11, Google Chrome (I have tested removing the extendedtokenchcheck) Found the PS on TechNet but it didn't make a different. I also tested Opera and have tested on Microsoft Edge. It doesn't seem to like any of them.

We have Site to Zone Assignment List set up through our Default Domain Policy GPO and I have added the URL in there. I have also made sure in Advanced IE Options. Windows integrated authentication is enabled. Although our ADFS is set up for just using Forms Authentication. I have tested outside the office also still the same symptoms. I am just looking at it thinking what have I missed... So far Steps I have follows are Set up DirSync Used IDFix to fix any broken UPN Suffixes so all User Accounts are updated. Set up ADFS Role using Wild Card SSL Certificate. Configured a WID Set up service account etc. Add an A Record in DNS to point to the Server ADFS is hosted on. Made sure in our DNS Panel externally an A Record is pointing to our External IP with the FQDN tag. Set up the domains to be federated. Synced all user accounts to Azure AD. Made sure the page comes up. Have done remote connectivity test using https://testconnectivity.microsoft.com/ Made primary authentication for both internal and external to be forms authentication. Made sure all UPN Suffixes are passed through. Rebooted the server. Gone to Login.microsoftonline.com typed in the UPN suffix to which it redirected to our ADFS Page. The page shows up fine but just asks for a password. I have also gone to the IDPinitiated Sign on and that asks for a password too. It signs in fine manually and signs out fine. Thanks I appreciate your help with this.

That only depends on which version. If you are configuring ADFS 2.0 It is not advised as it needs IIS components. ADFS 3.0 although still not best practise shouldn't pose too much of an issue apparently. Having said that I can't get automatic logon to work on mine :')

Good Afternoon, I have set up ADFS 3.0 on our DC running Windows Server 2012 R2. I have Dirsynced all our accounts to Office 365 configured Single Sign On. I can Redirect to our ADFS logon page However when you redirect the ADFS Logon Page it is asking still for a password. I have AD synced to Azure also and according to both domains they are federated for Single Sign On. I have assigned a Wildcard Certificate and made sure the domain exists everywhere. I also have The Token Certificates configured as per what ADFS makes when it is set up. As far as I can see it should all work however I still can't get it to just bypass the logon and go straight into office 365. It does login manually absolutely fine using the UPN Suffix. I have made sure all accounts have been updated to the UPN Suffix I wish to use. I have also got TMG 2010 Configured as our Web Application Proxy and when you do a test using the test connectivity page on Microsoft it all passes. I am just not sure what I could be missing to cause it not to logon automatically. Any help would be really appreciated. Thank you, Damien

Have you checked your Flash version in case it is different? Could be running an older version. Unlikely if you are on 8.1 but I've seen stranger things I suppose it depends on your update process. Also to get ours to work I have to open the presentation. The error comes up. I then have to close it run the command again then open it and it sorts it. Really finneky I know. But it's the only way I have got ours to work so far. Thanks

As a temporary workaround. The thing I have found is that when the error appears it cannot register the .ocx file when Flash Player updates. To fix Boardworks what I have had to do is advise the user to run a batch file that registers the Flash Player ocx file based on the version. regsvr32 C:\Windows\System32\Macromed\Flash\Flash32_19_0_0_185.ocx (Or whichever version of Flash you are using) Steps they follow. Copy the Batch file to the desktop. Run Boardworks if the error appears. Close Boardworks run the batch file. Reopen Boardworks. You should find the Flash content works. I am currently looking into this with Boardworks to see if there is a more permanent fix. Thanks.

Some controls on this presentation can't be activated - They might not be registered on this computer Has any one managed to solve this? I am encountering the same problem myself. Problem is the presentations work on my PC fine. I am running 64bit Windows 7 with up to date Flash Player and Shockwave. The PC's that actually need to access the software cannot run the flash content. It brings up the above error. Flash and Shockwave are completely up to date. The image is a refreshed image. The Boardworks presentations are all shared on the network. At Software Level there is nothing different between the computers. The only difference mine has is Architecture. The only other difference is my Active Directory profile has more permissions than the user profiles however I cannot give them the same rights. I could really do with some help on this one. Thanks