You may receive an error message that states that you are not authorized to access applications that are published through Microsoft Forefront Unified Access Gateway. This problem may occur even if you are a member of a group that is granted permissions to view those applications.

This problem may occur if the group name that's used for authorization contains one or more multibyte characters. This problem does not occur if you are a direct member of such a group. However, if you are a member of the group only through group nesting, you will receive the error message.


This problem occurs because Unified Access Gateway does not encode multibyte characters correctly when it processes nested groups.


This problem is fixed in Rollup 1 for Forefront Unified Access Gateway 2010 Service Pack 4.


To work around this problem, authorize access to applications by using only individual user accounts or groups that users are direct members of.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology that Microsoft uses to describe software updates.

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!