ISA Server report only shows a single ip address when used with terminal services. Need to show individual users.

A customer of mine uses terminal services to provide Internet and file access to about a dozen users. The terminal services box is SBS 2003. The PDC is also a SBS box running ISA Server in proxy mode only (no firewall). They want to be able to provide website access reports for individual users. The problem is that the ISA reports only show 1 internal IP address (i.e. the Terminal services box). Is there a way to show individual users on these reports?
TrentSlaterAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Keith AlabasterEnterprise ArchitectCommented:
So you have two SBS systems running on the same infrastructure? OK, no problem there although ip addressing/dhcp etc can't be much fun for you.... :(
What version of ISA are you running?
0
TrentSlaterAuthor Commented:
Sorry - the SBS 2003 box is the PDC, and the terminal server box is Server 2003 standard.
They are running ISA 2000
0
Keith AlabasterEnterprise ArchitectCommented:
Thanks, that makes more sense. :) - If you have ISA (as part of the SBS Premium) you know that you can get ISA2004 as apart of SP1?  This is far superior although it wouldn't help in what you are trying to do.

If the connection is coming from the terminal services box then that is the IP that will be presented. Securenat clients cannot authenticate to ISA and you cannot install the ISA firewall client on the TS server. I assume you are running TS in application mode?

With ISA2004 you have the option to make all users authenticate ie it can prompt for credentials if you want to but many people see this as more of a hindrance than a help
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

TrentSlaterAuthor Commented:
So is there no other way that they can report on the individual users web surfing?
0
Keith AlabasterEnterprise ArchitectCommented:
I assume that if your users do not use the TS service but go directly out the SBS/ISA box then you get the correct stats & identification?

Can you give me some more info on the TS setup? You are using application mode? The app calls the Internet or the client directly?
When you look at the ISA logs, is it showing web access through anonymous? by ip? By service name?

Our problem is to get the ISA server to recognise the TS session login name rather than the ts server name as I am sure you already know.
0
TrentSlaterAuthor Commented:
Keith

TS Setup - clients are all thin client workstations. They TS directly to the TS box (in APP mode) using the PDC for authentication. When I check the ISA logs, only the IP for the TS box is shown.

"Our problem is to get the ISA server to recognise the TS session login name rather than the ts server name as I am sure you already know." - this is exactly the problem !

All the client wants to do is check the "surfing habits" of a particular TS user. Sounds simple ;-)

Trent
0
TrentSlaterAuthor Commented:
Keith

This problem has now advanced to another question.
Can you look at
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_22687724.html
0
Keith AlabasterEnterprise ArchitectCommented:
Thanks Trent :)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.