topic Re: Horizon to UAG: You are not entitled to use the system in Horizon Desktops and Apps

Horizon to UAG: You are not entitled to use the system

vmmedmed — Sat, 18 Jul 2020 02:29:11 GMT

We have a typical setup of UAG open to the Internet and then connections from the

UAG to the connection servers. Suddenly today users on the outside going

to the UAG when trying to connect their Horizon client were prompted for

user name and password and promptly got "You are not entitled to use the system"

error message. Users on the corporate network who went directly to the

connection servers had no problem getting to their virtual desktop.

Does anyone have a thought as to how one path would fail for entitlement

but going direct to the connection server would succeed? Thank you.

Re: Horizon to UAG: You are not entitled to use the system

Shreyskar — Sat, 18 Jul 2020 16:44:10 GMT

Hi vmmedmed

In Horizon Administrator, select Users and Groups, Click the Remote Access tab. Do you have any user/group added here? If yes, remove all from here and test again.

This setting ONLY allows access to specific users/groups from external network restricting access for all other users and groups regardless of the entitlement set on desktop pool level.

Re: Horizon to UAG: You are not entitled to use the system

vmmedmed — Sat, 18 Jul 2020 18:28:48 GMT

This is very helpful indeed. I'll have to research if someone added a group.

There was one in there when we investigated the issue. To work around it

we started adding other to the remote access. But sounds like a better

approach is to remove all.

THANK YOU

Re: Horizon to UAG: You are not entitled to use the system

GalenCampbell — Wed, 24 Mar 2021 01:57:22 GMT

I have an interesting issue as well. F5 external and internal VIP, UAGs that the external F5 point to. internal VIP just points to internal connection servers. Internal devices that use the internal VIP get an immediate "you are not entitled to any pools." If I add them to the remote access group, it works fine. If I remove them from the group, and Point the client to a connection server, and bypass the VIP, it works. Cant figure this one out.

Re: Horizon to UAG: You are not entitled to use the system

trankilou — Fri, 09 Apr 2021 08:46:03 GMT

We also encounter the same behaviour as you @GalenCampbell (unable to connect to CS balanced by internal LB VIP without adding group to remote access group) since we upgraded to Horizon 7.13. (it was working when we were using Horizon 7.11, and no changes have been made to our load balancer !)

Did you manage to solve the problem ?

Re: Horizon to UAG: You are not entitled to use the system

KnightSi99 — Tue, 29 Jun 2021 18:33:58 GMT

This was our issue today, someone inadvertently added a test account to the Remote Access tab thinking it was the same as an entitlement. This then caused anyone accessing our environment externally to receive the "You are not entitled to use the system" message. Once we removed the account anyone accessing the environment externally could. Thank you!!!!!

Re: Horizon to UAG: You are not entitled to use the system

dbooker — Tue, 05 Sep 2023 17:37:13 GMT

Galen,

I know this is an old post. We are experiencing the exact issue you was having. Did you ever figure out the issue?

Re: Horizon to UAG: You are not entitled to use the system

Mickeybyte — Wed, 06 Sep 2023 06:12:05 GMT

@dbooker

Since this is an old post, which already has a solution, and also contains 2 different problems apparently, it might be better to create a new post for your problem and give us some more detail about the exact problem you have (describe the issue, error messages, your configuration, ...)