Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
Web Filtering users that are in more than one AD group

Answered Web Filtering users that are in more than one AD group

  • Friday, January 18, 2013 11:28 AM
     
     
    Sign In to Vote
    0

    Hi

    Is it possible for TMG to filter users who are in more than one group. 

    We currently allow students access to social networking sites between 12-1.  We have a deny rule in place with a time schedule that allows them access at 12-1, this works perfectly.

    We need to allow some students access to social media at different times, so we have created a similar rule above the working deny rule and added the students into another AD Group. However when they try and access social media they are getting blocked, is this because they still reside in the AD group for the first deny rule, also is there a way for the users to be filtered by two differnet AD groups by TMG


     

All Replies

  • Monday, January 21, 2013 7:15 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi,

    Thank you for the post.

    “Is it possible for TMG to filter users who are in more than one group. ” - No, TMG Server checks the access rules, in order. If an allow rule applies to the request, TMG Server will allow the request. After applying a rule, TMG Server does not match the request to any other rule and stops rule evaluation.

    Regards,

    Nick Gu - MSFT