Solved

Forefront UAG 2010 - Authorization: missing domain groups/members

Posted on 2011-02-14
7
1,168 Views
Last Modified: 2013-11-16
Hi,
 
I'm trying to configure specific application access based on a group of users but I cannot see most of my custom domain groups/users. The generic ones exists i.e. Domain Admins but I'm missing a whole chunk of security groups and users from our domain and I really can't see why they would be missing.

They're held in a custom OU where there's a few subfolders of OUs.

I've tried selecting the Show Users & Groups (include subfolders) option but that makes no difference apart from adding a blank named folder to the top level that I cannot navigate into.

There are some users in there that we created. Room Mailbox users for resource bookings etc. but I don't seem to be able to see any of the main users/groups we have set up.

Any ideas?

Thanks in advance.
0
Comment
Question by:itmtsn
  • 4
  • 3
7 Comments
 

Author Comment

by:itmtsn
ID: 34889336
Update: We've worked out that we can only see groups in the Users container in AD. If I add a group into the default Users Container then make the actual group I want to see a member of that group I can apply the rights I want.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 34889437
I assume you are running UAG 2010 SP1?
Are you missing these additional AD groups on ALL UAG trunks you have created or just this one? If just this trunk, have you selected the same authentication server as previously?
0
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 500 total points
ID: 34896402
Looks like I was typing a response to your initial post during which you posted your update.

Still would like confirmation that you have deployed both SP1 and at least rollup 1 for SP1 to the UAG box please.
http://blogs.technet.com/b/edgeaccessblog/archive/2010/10/21/announcing-forefront-uag-2010-service-pack-1.aspx

http://support.microsoft.com/kb/2475733

0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:itmtsn
ID: 34904509
It was my error. On the authentication server the wrong Base DN was set. It was looking straight at the Users container and not the top level domain.

Thanks for the suggestions. By going back and revisiting the authentication server I found the problem.
0
 

Author Comment

by:itmtsn
ID: 34904521
Sorry Keith. Yep it was running both SP1 and the update. With your suggestion it made me go back and look through the authentication settings as something seemed to be wrong. So thanks for the suggestion.
0
 

Author Closing Comment

by:itmtsn
ID: 34904526
Question answered. Found the fault
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 34904890
Welcome and glad it's sorted
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
An article on effective troubleshooting
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question