Solved

Forefront UAG 2010 - Authorization: missing domain groups/members

Posted on 2011-02-14
7
1,171 Views
Last Modified: 2013-11-16
Hi,
 
I'm trying to configure specific application access based on a group of users but I cannot see most of my custom domain groups/users. The generic ones exists i.e. Domain Admins but I'm missing a whole chunk of security groups and users from our domain and I really can't see why they would be missing.

They're held in a custom OU where there's a few subfolders of OUs.

I've tried selecting the Show Users & Groups (include subfolders) option but that makes no difference apart from adding a blank named folder to the top level that I cannot navigate into.

There are some users in there that we created. Room Mailbox users for resource bookings etc. but I don't seem to be able to see any of the main users/groups we have set up.

Any ideas?

Thanks in advance.
0
Comment
Question by:itmtsn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 

Author Comment

by:itmtsn
ID: 34889336
Update: We've worked out that we can only see groups in the Users container in AD. If I add a group into the default Users Container then make the actual group I want to see a member of that group I can apply the rights I want.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 34889437
I assume you are running UAG 2010 SP1?
Are you missing these additional AD groups on ALL UAG trunks you have created or just this one? If just this trunk, have you selected the same authentication server as previously?
0
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 500 total points
ID: 34896402
Looks like I was typing a response to your initial post during which you posted your update.

Still would like confirmation that you have deployed both SP1 and at least rollup 1 for SP1 to the UAG box please.
http://blogs.technet.com/b/edgeaccessblog/archive/2010/10/21/announcing-forefront-uag-2010-service-pack-1.aspx

http://support.microsoft.com/kb/2475733

0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:itmtsn
ID: 34904509
It was my error. On the authentication server the wrong Base DN was set. It was looking straight at the Users container and not the top level domain.

Thanks for the suggestions. By going back and revisiting the authentication server I found the problem.
0
 

Author Comment

by:itmtsn
ID: 34904521
Sorry Keith. Yep it was running both SP1 and the update. With your suggestion it made me go back and look through the authentication settings as something seemed to be wrong. So thanks for the suggestion.
0
 

Author Closing Comment

by:itmtsn
ID: 34904526
Question answered. Found the fault
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 34904890
Welcome and glad it's sorted
0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
An article on effective troubleshooting

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question