|
ummm...Interesting topic!
There do exist 3rd party add-ons to MS ISA that do exactly as you wish!
The other "possible" (but crazy) option (and I haven't tested this) is...
The problem with adding everyone to a group and then giving that group permissions to access the ISA server has already been highlighted - the users security token needs updating; and this is only performed at logon.
Instead of adding everyone to a group and then giving that group permissions to access the ISA server, try...
Listing all your users in ISA on a user-by-user basis. If users exceed their internet quota, then you can automate the removal of their user account from the ISA server.
I don't believe they will need to logout and back in again, because their security token doesn't need updating. When they next access the ISA server their security token will not be in the ISA access list and they 'should' be denied access.
Please Note...While "theorectically" I think this will work...Personally I wouldn't recommend it. I have no idea how many users you have and adding all the users one by one would be crazy. Enumerating this access list is likely to be slow. Also, when you create a user you'd have to ensure that you add them to the ISA server access list.
...there are loads of other reasons why I wouldn't do as I suggest. However, I 'think' this will work.
My own opinion is to invest in a 3rd party add-on to ISA Server.
Good luck!
Lee
| 
