Sign in
Microsoft.com
 
Forefront Edge Security TechCenter
 
 
 
Forefront Edge Security TechCenter > Forefront Edge Security Forums > Forefront Edge Security - General > ISA 2006 + AD groups Sync
Ask a questionAsk a question
Search Forums:
 

AnswerISA 2006 + AD groups Sync

  • Saturday, October 24, 2009 7:11 AMjames2k8 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    For some reason when I make changes to AD groups, ISA 2006 does not replicate the changes down.  Is it possible?
     

Answers

  • Saturday, October 24, 2009 8:33 AMKent Nordström Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    ISA do not replicate AD data to itself.

    If you have a user set containing a AD group the user will be considered belonging to that user set as soon as added to the group.
    Depending on AD structure you might need to wait for some AD replication in order for ISA to see this change on the DC it is talking to.
    The user will also need to start a new session with ISA in order for the changed membership to happen.
     

All Replies

  • Saturday, October 24, 2009 8:33 AMKent Nordström Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    ISA do not replicate AD data to itself.

    If you have a user set containing a AD group the user will be considered belonging to that user set as soon as added to the group.
    Depending on AD structure you might need to wait for some AD replication in order for ISA to see this change on the DC it is talking to.
    The user will also need to start a new session with ISA in order for the changed membership to happen.