IAS / RAS Problem?

[Alan N]

Hi..

We have several users configured in a W2k security group
called 'Internet Access'on a w2k domain. We use Internet
Authentication Service with RADIUS to authenticate those
users to our Watchguard firebox 700 firewall, which is
configured to allow only members of the 'Internet Access'
group out to the internet.

My problem is that several of the users in the 'Internet
Access' group now cannot access the internet, everyone
else in the group is fine! I've checked their user ids in
active directory, they seem to be configured the same as
the users who can access the internet, I checked the
config of IAS, RRAS and the Firebox, and can't find
anything wrong. I've tested the 'Internet Access' group is
working by removing my id from it, then trying to access
the internet, I can't...I then put my name back in and it
works again!

So, I'm at a bit of a loss... Does anyone have any ideas
what might be causing this?

Cheers.

Alan.

 

[Wajihy [MSFT]]

if there is a remote access policy on the IAS server before that one that
allows them to internet access, and if a user matches that policy first it
will apply to him
the problem might be that these users that are seeing this issue matches a
prior policy more restrictive on the IAS server

--

This posting is provided "AS IS", with NO warranties and confers NO rights

Upcoming Event: Tech Chat about "Secure Wireless authentication using IAS,
PEAP and EAP"
on September 25th at 10AM PT
http://communities2.microsoft.com/home/chatroom.aspx?siteid=34000081

 

[Alan N]

Hi, thanks for the reply...
The Internet access policy is the first one on the list,
so I don't think thats what is causing the problem.

Cheers.

Alan.

 

[Wajihy [MSFT]]

once one of these users ( who are memeber of the security group) that are
not able to access the internet, try to connect does is get an access
denied, is there any erro on the IAS server? any event?

--

This posting is provided "AS IS", with NO warranties and confers NO rights

Upcoming Event: Tech Chat about "Secure Wireless authentication using IAS,
PEAP and EAP"
on September 25th at 10AM PT
http://communities2.microsoft.com/home/chatroom.aspx?siteid=34000081