|
|
|
iPrism Knowledgebase June 22, 2010 IP0048.htm
|
|
|
|
iPrism Knowledgebase June 22, 2010 IP0048.htm
|
If you find that a user logged into a PC is getting the same Internet access as another user, although they are assigned to different profile, the following should be examined:
Note that when profiling by Windows group membership (username) there is a "1stmatch wins" rule. If new Windows groups are added, and an existing user is a member of the newly added group, and the group is listed before their "original" group and the assigned profile for the new group differs, then the user appears to have an "incorrect" profile. Note: the same "1st match wins" rule applies for network profiling (by IP address). It is possible to add a new network definition such that a users IP address falls into the newly added network with a different profile assignment.
If Authentication is not enabled, Internet access is based on the IP address of the workstation. Therefore, multiple people logging into the same workstation will all get the same level of Internet access. To make sure you have Username and Network profiling enabled as intended.
For information on both issues above, see:
How do I Profile Networks and Users using Windows Authentication
If Authentication is enabled, iPrism maps usernames to the IP address of the PC until the user takes an action that would terminate their session or the authentication session is forcibly timed out. To properly train users and configure iPrism timeouts, see: