8e6 Technologies R3000 manual Modify the Global Group Profile, 204

CHAPTER 5: AUTHENTICATION DEPLOYMENT ACTIVATE AUTHENTICATION ON THE NETWORK

if errorlevel 0 echo code 0: Success goto :end

:try3

echo Running net use...

net use \\192.168.0.20\r3000$ if errorlevel 1 goto :error

if errorlevel 0 echo code 0: Success goto :end

:error

if errorlevel 1 echo code 1: Failed!

:end

Once this updated login script has been added to the domain, each time users log in to Windows they will also log in to the R3000. Users will be blocked according to the profiles set up on the domain.

Step 2: Modify the Global Group Profile

The last step of the activation process is to adjust the Global Group Profile to set the policy for members of an IP-based profile, or for users who are not authenticated.

If you set a restrictive profile, unauthenticated users will not be able to obtain access until they are successfully authen- ticated.

If you set up a less restrictive profile to allow access, a user can still be authenticated, but won't be prompted to authen- ticate him/herself unless attempting to access a site that is blocked. Since the login script will automatically run when the user logs in, a less restrictive profile might be used to allow logging with the user’s name without forced blocking.

204 8E6 TECHNOLOGIES, R3000 ENTERPRISE FILTER AUTHENTICATION USER GUIDE