ISA help please

This may sound odd, but I think my server is picking on
me.

We have SBS2000 with 4 Win2K Pro and 1 XP-Pro clients on
our network.

Until recently all users were able to access the internet
just fine, but now my server has decided that the user on
the XP machine can not. This applies only to one uswr on
the XP machine though, when logging on as Administrator
from this machine all is well.

Hence, this one user is blocked from internet access,
getting the following error message every time IE is
opened:

403 Forbidden - The ISA Server denies the specified
Uniform Resource Locator (URL). (12202)
Internet Security and Acceleration Server

I have searched for restrictions in the ISA snap in, as
well as in the AD user listing for this user, but I can
not find a thing.

Anyone have any ideas ?

TIA

Chris

Gizmo
Mon Aug 11 18:43:21 CDT 2003

Hi Chris, Is the firewall client installed or IE settings, connections, LAN
settings got proxy details ?


"Chris" <chris@sli-us.com> wrote in message
news:0b5b01c36050$c7a6e680$a001280a@phx.gbl...
> This may sound odd, but I think my server is picking on
> me.
>
> We have SBS2000 with 4 Win2K Pro and 1 XP-Pro clients on
> our network.
>
> Until recently all users were able to access the internet
> just fine, but now my server has decided that the user on
> the XP machine can not. This applies only to one uswr on
> the XP machine though, when logging on as Administrator
> from this machine all is well.
>
> Hence, this one user is blocked from internet access,
> getting the following error message every time IE is
> opened:
>
> 403 Forbidden - The ISA Server denies the specified
> Uniform Resource Locator (URL). (12202)
> Internet Security and Acceleration Server
>
> I have searched for restrictions in the ISA snap in, as
> well as in the AD user listing for this user, but I can
> not find a thing.
>
> Anyone have any ideas ?
>
> TIA
>
> Chris

fbrown
Wed Aug 13 19:31:28 CDT 2003

Thank you for posting your question to the SBS newsgroup

The first step would be to verify that the user is a member of the
BackOffice Internet Users group in AD. You can find this group under AD
users and groups, click on the "My Business" OU and click on the Groups OU.
If the user in question is not a member of this group he/she will not be
allowed access to the internet.