Wrong Policy

July 19, 2011 • Customer Services       
Synopsis

This article describes what to check and how to fix things if you believe a user is being assigned the wrong policy

Article

As described here CensorNet checks a few things to determine which policy to apply. At the end of its tests, if it has not been able to identify either a workstation or a user it will assign the default policy to the user. It is normally at this time that users notice that a site they should be allowed to visit is suddenly being blocked.

The first thing to consider is, if you have only just modified the policy, you should be aware that changes take ~5 minutes to propagate to the parser, so if you have not waited that long, do so, and then try again.

If the incorrect policy rules are still being applied, ensure that the workstation or user is in the correct group and that the schedule for that group has a policy colour spot set for the current time. If the policy colour spot is set to (none) then the default policy will be applied.

If you are certain that these aspects are all correct, and if you are using NTLM authentication, it is quite likely that you are suffering from clock drift. You can find instructions here which will explain how to configure your CensorNet to exactly the same time as your Active Directory and ensure that it stays that way.

If you are using any other form of user authentication you should check that the authentication system is working. Contact CensorNet Support if you require assistance.

Related articles


Last modified on Tue, July 19, 2011 « Back