https://community.checkpoint.com/t5/Spark-Firewall-SMB/Unable-to-use-selected-ad-groups-to-authenticate-remote-users/m-p/206138#M10247 <P>Recommend engaging with the TAC: <A href="https://help.checkpoint.com" target="_blank">https://help.checkpoint.com</A>&nbsp;</P> Wed, 14 Feb 2024 22:49:34 GMT PhoneBoy 2024-02-14T22:49:34Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Unable-to-use-selected-ad-groups-to-authenticate-remote-users/m-p/205791#M10244 <P>Hi,</P><P><SPAN>hardware: Checkpoint 1570</SPAN></P><P><SPAN>GAIA Embedded: R81.10.08 (996001683)</SPAN></P><P>I'm having trouble using specific AD groups to authenticate users using checkpoint mobile application on windows PC to a Checkpoint 1570.</P><P>If I set "Grant remote access permissions to:" to "All users in Active Directory", I can connect to the firewall via the checkpoint mobile application install on a windows PC. If I now set it to "Selected Active Directory user groups" and also specify that group in the "Remote Access Users" page, it does not work. Additional, I tried to specify every group available in AD as remote access users, still doesn't work.</P><P>I have tried multiple users, multiple groups, same result when I specify to use selected AD groups. Removed and added AD server as well.&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Successful Connection, All Ad Groups, 1" style="width: 947px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24449iAA65F7CF56B97A4D/image-size/large?v=v2&amp;px=999" role="button" title="success1.png" alt="success1.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Successful Connection, All Ad Groups, 2" style="width: 459px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24450i7D6328BD7060B00A/image-size/large?v=v2&amp;px=999" role="button" title="success2.png" alt="success2.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Failed Connection, Selected Ad Groups, 1" style="width: 943px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24453iE9E6775C200CE149/image-size/large?v=v2&amp;px=999" role="button" title="fail1.png" alt="fail1.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Failed Connection, Selected Ad Groups, 2" style="width: 473px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24454iB2350512086153A0/image-size/large?v=v2&amp;px=999" role="button" title="fail2.png" alt="fail2.png" /></span></P><DIV class="">&nbsp;</DIV><DIV class="">&nbsp;</DIV><P>&nbsp;</P> Mon, 12 Feb 2024 15:56:06 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Unable-to-use-selected-ad-groups-to-authenticate-remote-users/m-p/205791#M10244 cshore 2024-02-12T15:56:06Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/Unable-to-use-selected-ad-groups-to-authenticate-remote-users/m-p/206138#M10247 <P>Recommend engaging with the TAC: <A href="https://help.checkpoint.com" target="_blank">https://help.checkpoint.com</A>&nbsp;</P> Wed, 14 Feb 2024 22:49:34 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/Unable-to-use-selected-ad-groups-to-authenticate-remote-users/m-p/206138#M10247 PhoneBoy 2024-02-14T22:49:34Z