RE: Domain Controller failure-------ISA stops browsing

  • From: "John Tolmachoff" <isalist@xxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 3 Feb 2003 07:33:35 -0800

What are the DNS servers configured on the ISA server?

Does ISA know where the other DCs are?

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


> -----Original Message-----
> From: bhavani.suresh [mailto:bhavani.suresh@xxxxxxxxxxxxxxxx]
> Sent: Friday, January 31, 2003 7:25 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Domain Controller failure-------ISA stops browsing
> 
> http://www.ISAserver.org
> 
> 
> 
> 
> Hi
> 
> i have a case which is very annoying.  I have win2k active directory
domain
> controllers.  Whenever my primary DC(Which is RID master,PDC Emulator,GC
> ETc.,) goes down, i find ISA doesnt authenticate users and hence browsing
doesnt
> go through.  why the hell ISA is not authenticating users against another
domain
> controller because i have more than 1 domain controller.
> 
> Is there any setting that i need to do on ISA??
> 
> PLs help
> 
> 
> -----Original Message-----
> From: btm [mailto:bmiyata@xxxxxxxxxxxxxxxxx]
> Sent: Sat, February 01, 2003 04:43
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Allowing access based on IP address
> 
> 
> http://www.ISAserver.org
> 
> 
> Hello All,
> We have an Enterprise ISA SP3, Integrated, in an array, on a W2K SP3.  We
> have set up rules to allow users out only if they are part of an
> authorized NT global group and have "ask unauthenticated users for
> identification" enabled on the Outgoing Web Requests.  We have configured
> all of the browsers to point to the ISA proxy.  Authorized users go out
> transparantly while unauthorized users are prompted for credentials.
> We now have a situation where "guest" terminals (no one signs on to the
> domain) need access to the Internet.  I have created a Client Address Set
> to allow the IP address out but I am still prompted for credentials.  I
> logged into the domain with an ID that is not part of an authorized global
> group and I was able to access the Internet (The situation we have is that
> no one will be signing on to that computer).  I disabled the "ask
> unauthenticated..." and I could access the Internet no matter what which
> is not good because we now lost control of who can access the Internet.
> Anyone have a solution for this?
> Thanks, Brian
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> bhavani.suresh@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 
> 
> DISCLAIMER:
>
----------------------------------------------------------------------------
---------------------------------
>  Please note that our domain name is changed from adnoc-fod.co.ae to
adnoc-
> dist.co.ae
>  Hence change your email addresses accordingly to reflect these changes.
>  This communication may contain confidential information.  If you are not
the
> intended recipient
>  please inform us immediately.
>  For complete disclaimer note please visit our website at:
>  http://www.adnoc-dist.co.ae/emaildisclaimer.htm
> 
>  Adnoc Distribution-Tel:02-6771300;Fax:02-6722322;
>  Email:webmaster@xxxxxxxxxxxxxxxx;Website:http://www.adnoc-dist.co.ae
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: