Versions / Builds AffectedAny TMG version
Problem SummaryTMG fails to load after enabling Kerberos Authentication in HA scenario.
TT / JIRAID990
How to IdentifyCustomer sets up a high availability (HA) TMG environment and enables Kerberos authentication as outlined here:
In this setup it is suggested to run the TMG Firewall service under an domain user account which member only of a dummy group (and NOT a local nor domain admin).
When configuring this the TMG Firewall service fails to load and the following event is logged:
Event ID: 14146
Source: Microsoft Forefront TMG Web Proxy
Forefront TMG failed to load Web Filter DLL D:\TMG2010\\WebMonPlg.dll
Workaround / Fix DetailsMake the TMG Firewall service account a local admin (this might pose a security risk).
Required ActionsExplain the workaround.
Explain that WebMonitor has not been designed with this scenario in mind.