NT4 logon restrictions prevent authentication

[AlienEmpire]

I have an NT4 server and Watchguard 1000 running v6.2.

When users are restricted in NT4 using the "logon to" workstation restriction in User Manager they cannot authenticate using the Watchguard authentication to access the Internet. If this restriction is removed the authentication works fine.

Has anyone else had this problem? Any fix for it?

 

[Ntr0P]

I have heard of this, but it has been a while. I'll take a stab and say enter the IP address of the FB as an allowed workstation as well.

 

[AlienEmpire]

Thanks for the tip. But in my case it didn't work.

 

[Ntr0P]

Interesting... this is direct from WG's site:

Windows NT User Manager for Domains has an option to restrict users so that they can only log on to certian workstations called "May Logon to all workstations". This option can be used when using NT Authentication on the Firebox, however, the Firebox does not have a NetBIOS name with which to identify itself to the Windows NT server. You can, however, add the IP address of the Firebox to the NT server. This will allow logins from the Firebox.