Horizon to UAG: You are not entitled to use the system

[vmmedmed]

We have a typical setup of UAG open to the Internet and then connections from the

UAG to the connection servers. Suddenly today users on the outside going

to the UAG when trying to connect their Horizon client were prompted for

user name and password and promptly got "You are not entitled to use the system"

error message. Users on the corporate network who went directly to the

connection servers had no problem getting to their virtual desktop.

Does anyone have a thought as to how one path would fail for entitlement

but going direct to the connection server would succeed? Thank you.

[Shreyskar · Accepted solution]

Hi vmmedmed

In Horizon Administrator, select Users and Groups, Click the Remote Access tab. Do you have any user/group added here? If yes, remove all from here and test again.

This setting ONLY allows access to specific users/groups from external network restricting access for all other users and groups regardless of the entitlement set on desktop pool level.

[vmmedmed]

This is very helpful indeed. I'll have to research if someone added a group.

There was one in there when we investigated the issue. To work around it

we started adding other to the remote access. But sounds like a better

approach is to remove all.

THANK YOU

[GalenCampbell]

I have an interesting issue as well.  F5 external and internal VIP, UAGs that the external F5 point to.  internal VIP just points to internal connection servers.  Internal devices that use the internal VIP get an immediate "you are not entitled to any pools."  If I add them to the remote access group, it works fine.  If I remove them from the group, and Point the client to a connection server, and bypass the VIP, it works.  Cant figure this one out.  

[trankilou]

We also encounter the same behaviour as you @GalenCampbell (unable to connect to CS balanced by internal LB VIP without adding group to remote access group) since we upgraded to Horizon 7.13.   (it was working when we were using Horizon 7.11, and no changes have been made to our load balancer !)

Did you manage to solve the problem ?

[KnightSi99]

This was our issue today, someone inadvertently added a test account to the Remote Access tab thinking it was the same as an entitlement. This then caused anyone accessing our environment externally to receive the "You are not entitled to use the system" message. Once we removed the account anyone accessing the environment externally could. Thank you!!!!!

[dbooker]

Galen,

I know this is an old post.  We are experiencing the exact issue you was having.  Did you ever figure out the issue?

[Mickeybyte]

@dbooker 

Since this is an old post, which already has a solution, and also contains 2 different problems apparently, it might be better to create a new post for your problem and give us some more detail about the exact problem you have (describe the issue, error messages, your configuration, ...)