Symptoms—When end users attempt to access the Forefront UAG portal, they may receive the following message "You have attempted to access a restricted URL. The URL contains an invalid parameter." There may also be an event 45 in the Forefront UAG Web Monitor with the short description "Bad Parameter in URL".

Cause—The first access attempt to the Forefront UAG portal using AD FS 2.0 requires a number of web browser redirections and services to start up. If the sign in process takes a long time (several minutes), end users may receive the above error message.

Solution—To start the services, it is recommended that after each activation the Forefront UAG administrator accesses the portal first. If users still encounter the problem they should try to access the portal again.