[isalist] Re: "Domain Controllers" in ISA 2004

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 7 Mar 2007 10:26:57 -0600

It's on a "need to know" basis -- sort of like configuring Exchange 2007
to support POP3S and IMAP4S.
 
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/> 
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
MVP -- Microsoft Firewalls (ISA)

 


________________________________

        From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Gerald G. Young
        Sent: Wednesday, March 07, 2007 10:19 AM
        To: isalist@xxxxxxxxxxxxx
        Subject: [isalist] Re: "Domain Controllers" in ISA 2004
        
        

        What?  Microsoft is pulling a Jack Nicholson?  We can't handle
the truth?

         

        I'm clueless as to what gives and was hoping to lurk long enough
to see the light.  No one's going to shine it our way? J

         

        Cordially yours,

        Jerry G. Young II

        Application Engineer, Platform Engineering and Architecture

        NTT America, an NTT Communications Company

         

        22451 Shaw Rd.

        Sterling, VA 20166

         

        Office: 571-434-1319

        Fax: 703-333-6749

        Email: g.young@xxxxxxxx

         

        From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
        Sent: Wednesday, March 07, 2007 11:14 AM
        To: isalist@xxxxxxxxxxxxx
        Subject: [isalist] Re: "Domain Controllers" in ISA 2004

         

        I can't say any more -- Guido is right outside my window!

         

        Thomas W Shinder, M.D.
        Site: www.isaserver.org <http://www.isaserver.org/> 
        Blog: http://blogs.isaserver.org/shinder/
        Book: http://tinyurl.com/3xqb7
        MVP -- Microsoft Firewalls (ISA)

         

                 

________________________________

                From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan
                Sent: Wednesday, March 07, 2007 10:06 AM
                To: isalist@xxxxxxxxxxxxx
                Subject: [isalist] Re: "Domain Controllers" in ISA 2004

                Speaking of which, I have two of those, "Domain
Controllers" and "Domain Controllers(1)" on my system...  Hmmmmm

                 

________________________________

                From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore
                Sent: Tuesday, March 06, 2007 9:57 PM
                To: isalist@xxxxxxxxxxxxx
                Subject: RE: [isalist] Re: "Domain Controllers" in ISA
2004

                 

                Here's what I'm experiencing. We have somewheres around
15 DCs in the domain. Two of them are on the local subnet. I recently
retired one of the two local DCs. Then I noticed that our Internet
connection got real slow--mainly a delay of, say, 20 seconds before a
page would load. I started poking around with DNS. If I changed the WAN
card on the firewall to point at an external DNS server, the web sped up
a bunch. But you probably know that this isn't a good arrangement and
pretty soon thereafter we got other problems happening. So I pointed DNS
on the WAN card back to the LAN address on the firewall. The other
problems went away but slow access came back. So I poked around on the
firewall a bit and found that Domain Controllers computer set. I noticed
that the list in there was out of date, and both of the DCs on the local
domain that were in that list are now retired. So I'm guessing (maybe
incorrectly) that that somehow bears on this problem--like maybe the ISA
server is now trying to talk to DCs on remote subnets since it can't
find the two DCs on the local subnet. So I was hoping if I could edit
that computer set I could make the problem go away.

                 

                Anyway, that's what's happening. Maybe I'm way off base?
Any suggestions?

                 

                Rob

                 

________________________________

                From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W
Shinder
                Sent: Tue 3/6/2007 3:54 PM
                To: isalist@xxxxxxxxxxxxx
                Subject: [isalist] Re: "Domain Controllers" in ISA 2004

                http://www.ISAserver.org <http://www.isaserver.org/> 
                -------------------------------------------------------
                 
                The domain controllers computer set is one of the great
mysteries of the
                ISA firewall. You won't find any documentation about it
and many will
                deny its existance. Never bring it up in polite company.
                
                Thomas W Shinder, M.D.
                Site: www.isaserver.org
                Blog: http://blogs.isaserver.org/shinder/
                Book: http://tinyurl.com/3xqb7
                MVP -- Microsoft Firewalls (ISA)
                
                
                
                > -----Original Message-----
                > From: isalist-bounce@xxxxxxxxxxxxx
                > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob
Moore
                > Sent: Tuesday, March 06, 2007 1:23 PM
                > To: isalist@xxxxxxxxxxxxx
                > Subject: [isalist] Re: "Domain Controllers" in ISA
2004
                >
                > http://www.ISAserver.org <http://www.isaserver.org/> 
                >
-------------------------------------------------------
                >  
                > Can this field not be edited? Is the ISA server
supposed to
                > pick up the
                > DCs automatically? What's the mechanism for that? Is
there
                > something in
                > my configuration that's not allowing this to happen?
                >
                > Thanks,
                > Rob
                >
                > -----Original Message-----
                > From: Rob Moore
                > Sent: Tuesday, March 06, 2007 1:18 PM
                > To: 'isalist@xxxxxxxxxxxxx'
                > Subject: RE: [isalist] Re: "Domain Controllers" in ISA
2004
                >
                > I have a stand-alone Standard edition server. I was
trying to edit it
                > from the ISA 2004 console.
                >
                > Rob
                >
                > -----Original Message-----
                > From: isalist-bounce@xxxxxxxxxxxxx
                > [mailto:isalist-bounce@xxxxxxxxxxxxx]
                > On Behalf Of Jim Harrison
                > Sent: Tuesday, March 06, 2007 12:55 PM
                > To: isalist@xxxxxxxxxxxxx
                > Subject: [isalist] Re: "Domain Controllers" in ISA
2004
                >
                > http://www.ISAserver.org <http://www.isaserver.org/> 
                >
-------------------------------------------------------
                >  
                > Where are you editing from; array or enterprise level?
                >
                > -----Original Message-----
                > From: isalist-bounce@xxxxxxxxxxxxx
                > [mailto:isalist-bounce@xxxxxxxxxxxxx]
                > On Behalf Of Rob Moore
                > Sent: Tuesday, March 06, 2007 9:10 AM
                > To: isalist@xxxxxxxxxxxxx
                > Subject: [isalist] "Domain Controllers" in ISA 2004
                >
                > I have a Computer Set in my ISA 2004 called "Domain
Controllers." The
                > list is inaccurate, and I think it's starting to cause
us
                > some trouble.
                > But I can't seem to edit it. How do I make changes to
it?
                >
                > Thanks,
                >
                > Rob
                >
                > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                >
                > Rob Moore
                >
                > Network Manager
                >
                > 215-241-7870
                >
                > Help Desk: 800-500-AFSC
                >
                >
                > All mail to and from this domain is GFI-scanned.
                >
                > ------------------------------------------------------
                > List Archives:
//www.freelists.org/archives/isalist/ 
                > ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                > ISA Server Articles and Tutorials:
                > http://www.isaserver.org/articles_tutorials/
                > ISA Server Blogs: http://blogs.isaserver.org/
                > ------------------------------------------------------
                > Visit TechGenix.com for more information about our
other sites:
                > http://www.techgenix.com <http://www.techgenix.com/> 
                > ------------------------------------------------------
                > To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
                > Report abuse to listadmin@xxxxxxxxxxxxx
                >
                > ------------------------------------------------------
                > List Archives:
//www.freelists.org/archives/isalist/ 
                > ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                > ISA Server Articles and Tutorials:
                > http://www.isaserver.org/articles_tutorials/
                > ISA Server Blogs: http://blogs.isaserver.org/
                > ------------------------------------------------------
                > Visit TechGenix.com for more information about our
other sites:
                > http://www.techgenix.com <http://www.techgenix.com/> 
                > ------------------------------------------------------
                > To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
                > Report abuse to listadmin@xxxxxxxxxxxxx
                >
                >
                >
                ------------------------------------------------------
                List Archives:
//www.freelists.org/archives/isalist/ 
                ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
                ISA Server Blogs: http://blogs.isaserver.org/
                ------------------------------------------------------
                Visit TechGenix.com for more information about our other
sites:
                http://www.techgenix.com <http://www.techgenix.com/> 
                ------------------------------------------------------
                To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
                Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: