Reply
Highlighted
L1 Bithead

Navigation Permits Expire - AD Groups

I recently implemented a policy that allows certain users who belong to a group in my Active Directory to go online. It seems to work well but after a while users report not being able to browse even if the LAN connection is maintained. The funny thing is that if you reboot the PC or simply block and unblock using the AD account the permissions are restored.

 

I would be grateful if I could get your help.


Accepted Solutions
Highlighted
L3 Networker

Re: Navigation Permits Expire - AD Groups

I believe what you are looking for is this: Configure Cache Timeouts for User Mapping Entries 

 

It sounds like your users are timing out,and without them logging in again in one form or another, the User-ID mapping is not restored. Double check the "User Identification Timeout (min)" value.

View solution in original post

Highlighted
L1 Bithead

Re: Navigation Permits Expire - AD Groups

Increase the timeout a bit, see how it behaves and play around with the AD policy to block the PC before the cache time runs out.

Thank you

View solution in original post


All Replies
Highlighted
L3 Networker

Re: Navigation Permits Expire - AD Groups

I believe what you are looking for is this: Configure Cache Timeouts for User Mapping Entries 

 

It sounds like your users are timing out,and without them logging in again in one form or another, the User-ID mapping is not restored. Double check the "User Identification Timeout (min)" value.

View solution in original post

Highlighted
L1 Bithead

Re: Navigation Permits Expire - AD Groups

Increase the timeout a bit, see how it behaves and play around with the AD policy to block the PC before the cache time runs out.

Thank you

View solution in original post

Highlighted
L2 Linker

Re: Navigation Permits Expire - AD Groups

@Alcs_altamirano 

 

I would recommend to start troubleshooting by capturing packets on the firewall and based on what you find in the packet capture , the troubleshooting would have to evolve from there.

 

If you still need help , I would recommend to open a support ticket.

 

Kavi

 

Highlighted
L1 Bithead

Re: Navigation Permits Expire - AD Groups

Ok gracias por el consejo.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!