Wingate and Authenticated user in AD

[enzo]

Hi, I have a problem with wingate (6.1) proxy in to Domain.
I use remote user database (Active Directory) and required the NTLM authentication at the users. I want that every time that a user opens IE comes demanded the login... but this does not happen.

1. I have tried with WGIC and without but it does not ask some authentication.

2. I have set up on explorer the demand for the password in Authenticated user.

-the RCS and WRS are configurated.
-the www proxy server configuration:
---authentication method: NTLM and Basic
---Policies: everyone must be authenticated
---System Policies: are ignored

the demand of User+Psw is only made at the user not present in AD.

[MattP]

Hi,

The WGIC will automatically pass through the NT login data that the user entered when they logged in to Windows, so the users won't be prompted to enter their user data again unless they have failed authentication against the database.

You can create a policy in the WWW proxy service that requires everyone to be authenticated, and check the NTLM auth option on the General page. This will require every WWW session to be authenticated. You can then set IE to prompt for user login details but in my experience it will often just pass through the original NT login data automatically.

It sounds like you've set up the policy correctly, but you should remove the Basic auth option, you should only ever use one or the other, not both.

Which option did you choose in IE? If you go to Tools>Internet options>Security>Custom level, then scroll all the way to the bottom and choose "prompt for username and password" it should (in theory) work.