9.2	Configuring Network Access policy

In the Configuration ► Proxy Settings area, the Integrated authentication option is disabled on GFI WebMonitor machines where the Network access setting is set to Guest only - local users authenticate as Guest. On a Microsoft Windows XP Pro machine that has never been joined to a Domain Controller, this setting is set by default.

The Network access setting can be configured on each GFI WebMonitor machine:

•	Manually or,

•	Using Active Directory GPO.

Configuring network access manually

To configure Network access setting on a GFI WebMonitor machine manually:

1. Navigate to Start ► Control Panel ► Administrative Tools ► Local Security Policy.2. Expand Security Settings ► Local P

2. Expand Security Settings ► Local Policies ► Security Options.

3. Right-click Network access: Sharing and security model for local accounts from the right panel and click Properties.

Screenshot 81 - Microsoft Windows XP: Local Security Settings tab

4. Select the Local Security Setting tab.

5. Select Classic - local users authenticate as themselves from the Network access drop-down list.

6. Click Apply and OK.

7. Close Local Security Settings dialog.

8. Close all open windows.

Configuring network access using GPO in Microsoft Windows Server 2003

To configure Network access setting on GFI WebMonitor machines through Microsoft Windows Server 2003 GPO:

1. Navigate to Start ► Programs ► Administrative Tools ► Active Directory Users and Computers on the DNS server.

2. Right-click the domain node and click Properties.

Screenshot 82 - Active Directory GPO dialog

3. Select Group Policy tab in the Domain Properties dialog.

4. Select Default Domain Policy from the list and click Edit.

5. Expand Computer Configuration ► Windows Settings ► Security Settings ► Local Policies and click Security Options.

6. Right-click Network access: Sharing and security model for local accounts from the right panel and click Properties.

7. In the Security Policy Setting tab, check Define this policy setting checkbox.

8. Select Classic - local users authenticate as themselves from the Network access drop-down list.

9. Click Apply and OK.

10. Close all open windows.

Configuring network access using GPO in Microsoft Windows Server 2008

To configure Network access setting on GFI WebMonitor machines through Microsoft Windows Server 2008 GPO:

1. In the command prompt key in mmc.exe and press Enter.

2. In the Console Root window navigate to File ► Add/Remove Snap-in… to open the Add or Remove Snap-ins window.

Screenshot 83 - Add/Remove Snap-ins window

3. Select Group Policy Management from the Available snap-ins list, and click Add.

4. Click OK.

Screenshot 84 - Console Root domain window

5. Expand Group Policy Management ► Forest ► Domains and Domain.

6. Right-click Default Domain Policy and click Edit. This opens the Group Policy Management Editor.

7. Expand Computer Configuration ► Policies ► Windows Settings ► Security Settings ► Local Policies and click Security Options.

8. Right-click Network access: Sharing and security model for local accounts from the right panel and click Properties.

9. In the Security Policy Setting tab, check Define this policy setting checkbox.

10. Select Classic - local users authenticate as themselves from the Network access drop-down list.

11. Click Apply and OK.

12. Close Group Policy Management Editor dialog and save the management console created.

This information is also available in KBase article:

http://kbase.gfi.com/showarticle.asp?id=KBID003666