Solved

ISA Server report only shows a single ip address when used with terminal services. Need to show individual users.

Posted on 2007-04-07
8
266 Views
Last Modified: 2008-05-29
A customer of mine uses terminal services to provide Internet and file access to about a dozen users. The terminal services box is SBS 2003. The PDC is also a SBS box running ISA Server in proxy mode only (no firewall). They want to be able to provide website access reports for individual users. The problem is that the ISA reports only show 1 internal IP address (i.e. the Terminal services box). Is there a way to show individual users on these reports?
0
Comment
Question by:TrentSlater
  • 4
  • 4
8 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 18871935
So you have two SBS systems running on the same infrastructure? OK, no problem there although ip addressing/dhcp etc can't be much fun for you.... :(
What version of ISA are you running?
0
 

Author Comment

by:TrentSlater
ID: 18872045
Sorry - the SBS 2003 box is the PDC, and the terminal server box is Server 2003 standard.
They are running ISA 2000
0
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 500 total points
ID: 18872149
Thanks, that makes more sense. :) - If you have ISA (as part of the SBS Premium) you know that you can get ISA2004 as apart of SP1?  This is far superior although it wouldn't help in what you are trying to do.

If the connection is coming from the terminal services box then that is the IP that will be presented. Securenat clients cannot authenticate to ISA and you cannot install the ISA firewall client on the TS server. I assume you are running TS in application mode?

With ISA2004 you have the option to make all users authenticate ie it can prompt for credentials if you want to but many people see this as more of a hindrance than a help
0
 

Author Comment

by:TrentSlater
ID: 18872161
So is there no other way that they can report on the individual users web surfing?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 18872235
I assume that if your users do not use the TS service but go directly out the SBS/ISA box then you get the correct stats & identification?

Can you give me some more info on the TS setup? You are using application mode? The app calls the Internet or the client directly?
When you look at the ISA logs, is it showing web access through anonymous? by ip? By service name?

Our problem is to get the ISA server to recognise the TS session login name rather than the ts server name as I am sure you already know.
0
 

Author Comment

by:TrentSlater
ID: 18873638
Keith

TS Setup - clients are all thin client workstations. They TS directly to the TS box (in APP mode) using the PDC for authentication. When I check the ISA logs, only the IP for the TS box is shown.

"Our problem is to get the ISA server to recognise the TS session login name rather than the ts server name as I am sure you already know." - this is exactly the problem !

All the client wants to do is check the "surfing habits" of a particular TS user. Sounds simple ;-)

Trent
0
 

Author Comment

by:TrentSlater
ID: 19512442
Keith

This problem has now advanced to another question.
Can you look at
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_22687724.html
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 19519535
Thanks Trent :)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Auslogics BoostSpeed 9 software 5 60
2003 File Server upgrade 11 48
Certificate Renewal Question 3 41
SBS 2003 RWW Login 3 10
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now