- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
02-28-2020 12:20 PM - edited 02-28-2020 12:29 PM
I recently implemented a policy that allows certain users who belong to a group in my Active Directory to go online. It seems to work well but after a while users report not being able to browse even if the LAN connection is maintained. The funny thing is that if you reboot the PC or simply block and unblock using the AD account the permissions are restored.
I would be grateful if I could get your help.
02-28-2020 01:36 PM
I believe what you are looking for is this: Configure Cache Timeouts for User Mapping Entries
It sounds like your users are timing out,and without them logging in again in one form or another, the User-ID mapping is not restored. Double check the "User Identification Timeout (min)" value.
02-28-2020 02:33 PM
Increase the timeout a bit, see how it behaves and play around with the AD policy to block the PC before the cache time runs out.
Thank you
02-28-2020 01:36 PM
I believe what you are looking for is this: Configure Cache Timeouts for User Mapping Entries
It sounds like your users are timing out,and without them logging in again in one form or another, the User-ID mapping is not restored. Double check the "User Identification Timeout (min)" value.
02-28-2020 02:33 PM
Increase the timeout a bit, see how it behaves and play around with the AD policy to block the PC before the cache time runs out.
Thank you
02-29-2020 08:12 PM
I would recommend to start troubleshooting by capturing packets on the firewall and based on what you find in the packet capture , the troubleshooting would have to evolve from there.
If you still need help , I would recommend to open a support ticket.
Kavi
03-02-2020 06:33 AM
Ok gracias por el consejo.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!