External Account Authentication - Active Directory

[Roger Wetherall]

We have installed Filemaker Server 7 on a Windows 2003 server and upgraded our database from ver 5.5. We are able to access the databases using Remote access and standard Filemaker Log In.

However I am trying to implement the External Server Authentication through the Active Directory which exists on a separate server (Win 2K)

I have setup several groups with users in them in active directory and created matching accounts within the database. However when all users (except the administrator) try to log on they get the following error message: "Your Access priviliges do not allow you to complete this action."

Only the administrator of the network IS able to log in. Does anyone have any idea what I am missing out on? Is there some special permission that I need to grant for the groups?

Roger

[laker_42]

Have you installed the latest update for FM Server 7? If not, install it and then try again. They addressed several issues with external authentication in this update.

John

[Roger Wetherall]

I have Server version 7.02 and am using filemaker Pro 7.03. Are these the latest versions?

[transpower]

Yes. What permissions do you have set for the groups in AD?

[Wim Decorte]

Yes. What permissions do you have set for the groups in AD?

AD permissions do not come into play at all. All the AD is authenticate the user (in other words: checks to see if the pw is correct for the account and returns a list of groups that the account belongs to).

- is the FMS machine a member of the domain

- any authentication errors reported in either the FMS machine or the domain controller?

- try with local groups first to see if you can get that to work

[Martyn Brake]

Has anybody made any progress on this problem? I am experiencing it and am pulling my hair out.

Initially it was only two users who could be externally authenticated I have since managed to get another user to work. However, no other user can access our database via external authentication.

I have set users to be members of the same groups in Active Directory, but one works and the other doesn't. I am very confused.

I am running FM server 7 v2 on a Windows 2003 Standard machine, FM Pro 7 v3 clients on a Windows 2003 SBS Domain (different server).

Martyn

[Martyn Brake]

An update for those of you that are interested.

I have added all users into the Domain Admins group, then after an hour or so they are externally authenticated and can access Filemaker. I am able to then remove them from the Domain Admins group and they can still access Filemaker. I do not know what aspect of the Domain Admins group allows them to be authenticated, but it works so I'm happy.

Martyn