Authenication shows as DEV007[System]

[munrobasher]

I'm running WGIC client on my PC for authentication and when I look in Gatekeeper, my connection is shown as:

DEV007[System]

Why isn't this DEV007[Rob Nicholson]?

Thanks, Rob.

PS. Is it possible to attach screenshots here?

[ChrisH]

You can post screen shots but you have to provide the link to the shot on a publicly accessible server somewhere. Click on the Img box above the text entry area in the message body of a reply. I would suggest using a .gif image. See below.

Did you perchance read the Qbik knowledgebase articles here on setting up WG in an Active Directory environment? There are other postings about Terminal Services and Citrix here If you do a search on this forum you will see lots of other articles as well. I hope some of this helps.

[munrobasher]

Hi Chris,

Unfortunately we're not running Active Directory yet - it's on the cards for later this year. We're stuck on NT 4 domains.

I'll check out the article though.

Cheers, Rob.

PS. Hmm, that's interesting - just brought the NT 4 WinGate server back up and I can preview/post in here. Now I wonder what the difference is between those two builds...

[munrobasher]

Okay, I've got some screenshots and uploaded them to our web site.

WGIC enabled on bootup



As you can see, quite a few autorun items have kicked in like the eBay toolbar utility. If I then surf the web after this, my entries are shown against DEV007[System]. They never show against DEV007[Rob Nicholson]. I'm guessing that the SYSTEM account is the first thing on boot-up that accesses the web (updates and the like) and therefore this account is sticking.

WGIC disabled on bootup

However, if I disable WGIC, reboot, enable WGIC and then go to the web, the authentication is done against my own account. It shows [DEV007]Rob Nicholson



Therefore it's going to be difficult to do things on a per-user basis as it's currently authenticating as a per machine.

Thanks, Rob.

[adrien]

Hi Rob

You can set WinGate or the client to not hook certain applications which in your case are running in the system account.

If you have an enterprise license, you can do this config in the engine, otherwise in the client. You need to add a few apps and set their mode to "local", i.e. for those apps the WinGate Client won't redirect connections.

Adrien

[munrobasher]

I would have thought we'd still want them to go via the WinGate client - otherwise they won't get internet access? So the requirement I guess is for two user names to authenticate but I guess this might not be possible.

Thanks, Rob.

[adrien]

Hi Rob

Usually the sorts of apps running in the system account are the sorts of apps that don't need or want internet access, e.g. inetinfo.exe (IIS or PWS), alg.exe (XP firewall).

So stopping them from loading the WinGate client is normally a good thing.

Regards

Adrien