The ZFDAgent does not connect with the IP Address Restriction configured
on the User Properties, Restriction tab regardless of whether the Novell
Client is installed or not.

I expect that this is working as designed because the agent does not
process the logic for the workstation IP address, therefore it restricts
all addresses. For example the WEB2 test bellow does not have a
ZFDAgent installed and will not allow authentication through the web.

Are there any work arounds to restrict access to the Middle Tier to
users single workstation?

--------------------------------------------------------------------

Testing components:

eDir1: eDirectory 8.7.3.7 on Windows 2003 Server with ZENworks 65 SP1a
MT1: Middle Tier Server version ZFD65SP1a on Windows 2003 Server.
Authentication domain back to the eDirectory server, i.e. eDirectory is
not installed on this server.
WS1: Windows XP SP2 workstation with the Novell Client 4.91 SP2 and the
ZFDAgent for ZEN65SP1a
WS2: Windows XP SP2 workstation with only the ZFDAgent for ZEN65SP1a
WEB1: Web Authentication through http://<midtier>/oneNet/xtier-login
with the ZFDAgent installed on the workstation
WEB2: Web Authentication through http://<midtier>/oneNet/xtier-login
without the ZFDAgent installed on the workstation

Set 1 test results:
With the IP Address Restriction set on the user object for the WS1:
The client could connect with the Novell Client to eDirectory from WS1
The client could not connect with the Novell Client to eDirectory from WS2
The ZFDAgent could not connect from the WS1
The ZFDAgent could not connect from the WS2
The ZFDAgent could not connect from the WEB1
The ZFDAgent could not connect from the WEB2

Set 2 test results:
With the IP Address Restriction is not set on the user object for the WS1:
The client could connect with the Novell Client to eDirectory from WS1
The client could connect with the Novell Client to eDirectory from WS2
The ZFDAgent could connect from the WS1
The ZFDAgent could connect from the WS2
The ZFDAgent could connect from the WEB1
The ZFDAgent could connect from the WEB2

Thanks!