Hi Alex, Much better! :) Thomas W Shinder, M.D. Site: www.isaserver.org Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Alexandre Gauthier [mailto:gauthiera@xxxxxxxxxxxxxxxxx] Sent: Tuesday, February 07, 2006 10:39 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Windows Logon http://www.ISAserver.org More accurately, you should 1) Go to a machine behind the ISA firewall 2) click start --> run 3) Type "dcpromo" 4) Promote it as a domain controller in the same forest and domain 5) Ensure everyone is in sync. 6) Transfer all FSMOs to the server behind the ISA either by using ntdsutil or the appropriate MMC snap in (the next step should handle this, but it might not. It happened to me) 7) Follow steps 1 to 3 of Tom's advice on the ISA server. 8) Duly execute the 6th step of Tom's advice. Many times. Just ensuring this is accurate should you decide to see the light and actually follow these steps. -----Message d'origine----- De : Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Envoyé : 7 février 2006 11:09 À : [ISAserver.org Discussion List] Objet : [isalist] RE: Windows Logon http://www.ISAserver.org Hi Joe, 1. Click Start and then click the Run command. 2. In the Run dialog box, enter dcpromo in the Open text box and click OK. 3. In the Wizard pages that follow, demote the machine from a domain controllor. 4. Go to a machine behind the ISA firewall, and repeat steps 1 and 2, this time using the Wizard to promote the machine to a domain controller 5. Join the ISA firewall to the domain created on the DC *BEHIND* the ISA firewall 6. Tell your friends that if you want your firewall to be a domain controller, put the DC on the pix server HTH, Tom Thomas W Shinder, M.D. Site: www.isaserver.org Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: joe silva [mailto:jsilva@xxxxxxxxxxx] Sent: Tuesday, February 07, 2006 9:52 AM To: [ISAserver.org Discussion List] Subject: [isalist] Windows Logon http://www.ISAserver.org What protocals do i have to allow on my ISA server to allow users to log on to the domain. DC and ISA are on the same server Thanks, Joe ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gauthiera@xxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx