AD Groups/Users not working for policies

[cpfnetwork]

I have just downloaded & installed WinGate 6.2.2 and installed onto a test Server 2008 system.

When the WWW Proxy server service is configured for AD user or group recipient I get a failed authorisation error.

If the recipient is set to EVERYONE then access through the proxy is granted.

Have I missed something in the setup?

[gkaram]

I am having the same problem. Did you find a solution?

[logan]

Have you enabled an authentication method by which the users can authenticate themselves and comply with the access policies?

Authentication methods are set in GateKeeper --> Services --> WWW Proxy Server -> General -> Authentication where required by policy

I recommend using NTLM authentication if available.

[cpfnetwork]

Thanks logan!

Garingly obvious now you point it out :)

[gkaram]

NTLM authentication is enabled on my system, but I am still getting access denied and authentication fails. If I put the everyone group back in the policies list, it works, but I cannot restrict sites based on groups. I must be missing something.

[gkaram]

Found the problem. I renamed some groups and it didn't update the policies. I added the groups back and it is working now. Is there a way to import aand export the ban lists? Can they be exported from the registry? I had to rebuild the lists in the new groups.

[logan]

The policies are stored in registry, so you can modify the registry to change which group a policy applies to which normally can't be changed while WinGate is running.

HKLM\Software\Qbik Software\WinGate\Services\WWW Proxy Server\AccessRights\UserName
REG_SZ (name of the user or user group)