Using AD as Wingate UserDatabase

[dfehse]

Hi,

i put my question concering UserDatabase in a new topic an repeat my question:

Today I installed WG in our Domain ( There are about 5000 objects in our AD). After I set the UserDB to NT-Users, entered our DC as Remote System and restarted the Wingate I have a empty WinGate Console. It seems that I don't have any rights anymore. But my User is in a Group that gives me full adminright on the Server. The intressing Thing is that Wingate has accepted my user but without any rights. An for the same reason users can't authenticat with thier AD-Users on Wingate.

You advised me to user a Domain Admin Account as Serviceaccount for Wingate but that runs in the same situation.

As far is I can see WinGate Caches Users / Groups in HKLM\software\qbik\userdatabase. When I ceck taht it seems that Wingate did at least partial synchronised the AD (I can not control it, there hundreds of Users and Groups).

And how and how often will Wingate synchronise his Cache with AD?

Thx for any help

Daniel

[adrien]

Hey

WinGate by default assigns access rights to members of a group called "Administrators". If you are an admin, but not a member of a group called "Administrators", then you won't get a bunch of rights.

Try logging into WinGate with the user account "Administrator", which I think is automatically put into the Administrators group, or add your admin account to the AD group called Administrators, and then restart WinGate and try logging in then.

Regards

Adrien

[slong]

Hi there,

Same issue with mine, it seems Wingate is not able to sync AD database that has hundreds/thousands of users/groups. The registry will only show partial list downloaded. I have already contacted Qbik couple times since last year and seems like they have no solution. Anyway, will be going ahead with ISA2004 soon since Wingate is giving so much issue. Cheers!

[adrien]

I can't find any record of any unanswered support post on this topic.

Where did you post your support queries to?

WinGate runs happily with thousands of AD users, we did extensive testing on it. We've tested up to 80,000 users in an AD.

As for how often WinGate will synchronise, it's settable. You can have it resynch every time an admin logs into GateKeeper, or whenever someone authenticates it can synchronise that account.

If you aren't doing a full synchronisation, then WinGate won't have the full list in the registry. It doesn't mean that WinGate users can't use any account in the AD though if you have the default settings selected.

Adrien

[KriZ]

Hi there,

I've got one questions to this topic, too. We're still using V5.2.3 with Windows 2000 Server and there is an option to manage accounting by "Windows NT / 2000 / XP Pro Database" in WG. Does this mean that Wingate gets the account information from AD - or from the local user database?

Thx,
Chris