<![CDATA[Qbik New Zealand Limited]]> <![CDATA[Authentication with WinGate Internet Client]]> The WinGate Internet Client (WGIC) applet provides a unique method of connection used by WinGate clients to access the Internet. With the applet installed on each client machine, all WinSock applications that clients are running can be intercepted redirected and controlled through WinGate. Having users connect using the WGIC allows for administrators to force the users to authenticate, before allowing them to access the Internet regardless the application they are using.

To use the WGIC for client authentication :
  1. Ensure the WGIC is installed on the client machines.
  2. Open GateKeeper on the WinGate Server.
  3. Open the Winsock Redirector Service under the System tab.
  4. Open the policies tab.
  5. Underneathe the window in the middle of the dialog make sure that the Default Rights (System Policies) are set to Are Ignored, then click on the Add button below. The new dialog Properties of new recipient will appear.
  6. Select the Everyone radio button.
  7. Select User must be authenticated radio button below the window.
  8. Click OK back through each dialog.
  9. Save changes in GateKeeper.
Users will be then shown a logon box to authenticate themselves anytime they try to use an application that attempts to connect to the Internet. ]]> <![CDATA[Distributing WinGate Internet Client in an Active Directory Envir...]]> The new WinGate Internet Client installer allows for it to be distributed and installed across an Active Directory.

Wrapped with the MSI installer The WinGate Internet Client can now take advantage of the benefits of centralized and controlled deployment across the network.

These instructions merely touch on the configuration and applications of Group Policy that are possible in the Active Directory. Administrators usually use Group Policy to specify options for managed configurations for groups of computers and users.

Depending on AD requirements the Group policy can be tailored for specific areas of the domain and will vary depending on requirements.

Obviously for specific instructions on setting Group Policies, creating group policy objects etc you will need to refer to the appropriate Microsoft Documentation.

Setting a Group policy basic distribution of the WinGate Internet Client:

  1. Place the WGIC.msi to a location on the server that will be distributing the WGIC. (In line with Active Directory procedures this location must be an accessible network share.)
  2. Open the Active Directory Users and Groups.mmc
  3. Right click on the Active Directory listed at the top of the left hand panel and select properties.
  4. Depending on Administrative requirements you can either add the software configuration to the default Group Policy (recommended) or create a new Group policy object.
  5. This will open a Group Policy editor mmc.

To set the distribution policy:

  1. Select Computer Configuration and double click on the Software folder.
  2. Under this highlight blue Software install icon and right click, selecting New > Package.
  3. A browse dialog will appear to allow you to locate the location of the WGIC.msi. Select the WGIC.msi installer from the appropriate location.
  4. A dialog asking how the software should be deployed will be presented. Due to the nature and purpose of the WinGate Internet Client application you should select Assigned.
  5. The Software Package should now be listed in the right hand pane of the Group Policy editor.

    If you double click on the new listing it will present you with various Operating System configuration options available.

    With the current WinGate Internet Client there should be no further configuration required (switches, installation options etc).

]]> <![CDATA[Removing the WGIC Control panel Icon]]>
Unless the WinGate Internet Client applet is disabled manually before you attempt to uninstall then in some cases it can leave the WGIC icon in the control panel after the uninstall is complete. To remove it do the following:
  1. Open the Windows control panel on the machine which WGIC was installed.
  2. Open the WGIC by double clicking on the appropriate icon.
  3. Remove the Enable WinGate Internet Client, and Launch the WinGate dialup monitor. (So these are not initiated on startup).
  4. Open the Advanced tab, click the Reset Client button.
  5. Click OK

Next
  1. Search the C drive (or appropriate drive where the WGIC was installed, and the system drive of the machine).
  2. Run a search for files and folders called wgclient.*
  3. Delete any Wgclient files when they are found.
  4. Reboot the machine.

]]> <![CDATA[Resticting WinGate Internet Client use of Programs]]>
  • Open GateKeeper on the WinGate server
  • Open up the WinSock Redirector Service found on the System tab.
  • Open the policies tab
  • Underneath the window in the middle of the dialog make sure that the Default Rights (System Policies) are set to Are Ignored, then click on the Add button below.
    The in new dialog Properties of new recipient will appear.
  • Select the appropriate user or group with whom you wish to restrict application use.
  • Click on the Ban tab
  • Put a tick in the Enable ban list check box at the top and then click the Add button.
    The Criterion dialog will appear
    Select This criterion IS met if option
  • From the first drop down menu select CLIENT APPLICATION NAME.
  • From the Second drop down menu select CONTAINS.
  • In the last box type the application name you wish to restrict into the last text box e.g messenger.exe.
  • Click OK to exit through previous dialogs.
  • Save changes in Gatekeeper ]]>