Friday, January 18, 2013 11:28 AM
Is it possible for TMG to filter users who are in more than one group.
We currently allow students access to social networking sites between 12-1. We have a deny rule in place with a time schedule that allows them access at 12-1, this works perfectly.
We need to allow some students access to social media at different times, so we have created a similar rule above the working deny rule and added the students into another AD Group. However when they try and access social media they are getting blocked, is this because they still reside in the AD group for the first deny rule, also is there a way for the users to be filtered by two differnet AD groups by TMG
- Edited by Wilberforce col Friday, January 18, 2013 1:14 PM
Monday, January 21, 2013 7:15 AMModerator
Thank you for the post.
“Is it possible for TMG to filter users who are in more than one group. ” - No, TMG Server checks the access rules, in order. If an allow rule applies to the request, TMG Server will allow the request. After applying a rule, TMG Server does not match the request to any other rule and stops rule evaluation.
Nick Gu - MSFT
- Proposed As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Friday, January 25, 2013 2:13 AM
- Marked As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Monday, January 28, 2013 1:41 AM