03-12-2010 04:48 AM
Hi,
We have a forest domain with 2 child domains. Now I have 2 pan agents installed for both domains and it's working well.
Now I have the following problem about wich groups to use.
I must use 2 global groups to give users access through the firewall. A global Group from domain A and a Global Group from Domain B. So this means I must administer 2 groups in different domains.
Normally in AD when you use a Domain Local group then you can put users from different domains in this group.
I have done that so I have a Domain Local Group with users from Domain A and B and selected this group in the Policy but no success.
Is it possible to use a domain Local group witch the User-ID feature?
The wish is to administer 1 group instead of 2 groups from both domains.
Many Thanks
Osman Bor
03-16-2010 11:06 AM
Hello Osman,
we may read the users in the domain local group, but we will not create a user to ip mapping for the names that are not part of the domain that the pan agent is configured for.
So using the domain local group with not work as a work around for this.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
