One windows PC/account is logging on to proxy as an unexpected domain user or non Domain user account.

book

Article ID: 168932

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

The machine / Windows PC  is joined to the domain and using IWA, but instead of seeing UserA you are seeing UserB log on to the proxy.  

Instead of seeing the account used to join the domain be presented to the ProxySG, the Proxy is presenting another User Name and Password, or a separate account from that IP address.

Note: If the  PCs / machines share an IP NAT before the proxy and you have selected an IP based surrogate / caching mode (such as Proxy IP or Origin IP Redirect) in the Web Authentication Layer authentication rule, that similar symptoms can be seen and would be expected.  A different authentication mode should be used in that scenario. 

Cause

It is possible to store windows credentials or other passwords in the Windows Vault \ Windows Credential Manager.  A user can store a different Domain Account in the "Windows Credentials" value.  It is possible this could be presented when browsing to the web, when the proxy prompts for credentials. 
 

Resolution

See the Microsoft "how-to" article referencing this:
http://windows.microsoft.com/en-ca/windows7/store-passwords-certificates-and-other-credentials-for-automatic-logon

In the Control Panel --> User Accounts ---> In the left pane, click Manage your credentials ---> In Windows Credentials --> Drop down the entry and select "Remove from vault"