[isalist] Re: "Domain Controllers" in ISA 2004
- From: "Gerald G. Young" <g.young@xxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Wed, 7 Mar 2007 13:10:15 -0500
Okay… J
I need to know. J
Does that work?
Cordially yours,
Jerry G. Young II
Application Engineer, Platform Engineering and Architecture
NTT America, an NTT Communications Company
22451 Shaw Rd.
Sterling, VA 20166
Office: 571-434-1319
Fax: 703-333-6749
Email: g.young@xxxxxxxx
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Thomas W Shinder
Sent: Wednesday, March 07, 2007 11:27 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: "Domain Controllers" in ISA 2004
It's on a "need to know" basis -- sort of like configuring Exchange 2007 to
support POP3S and IMAP4S.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Gerald G. Young
Sent: Wednesday, March 07, 2007 10:19 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: "Domain Controllers" in ISA 2004
What? Microsoft is pulling a Jack Nicholson? We can’t handle the
truth?
I’m clueless as to what gives and was hoping to lurk long enough to
see the light. No one’s going to shine it our way? J
Cordially yours,
Jerry G. Young II
Application Engineer, Platform Engineering and Architecture
NTT America, an NTT Communications Company
22451 Shaw Rd.
Sterling, VA 20166
Office: 571-434-1319
Fax: 703-333-6749
Email: g.young@xxxxxxxx
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
Sent: Wednesday, March 07, 2007 11:14 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: "Domain Controllers" in ISA 2004
I can't say any more -- Guido is right outside my window!
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan
Sent: Wednesday, March 07, 2007 10:06 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: "Domain Controllers" in ISA 2004
Speaking of which, I have two of those, “Domain
Controllers” and “Domain Controllers(1)” on my system… Hmmmmm
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore
Sent: Tuesday, March 06, 2007 9:57 PM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] Re: "Domain Controllers" in ISA 2004
Here's what I'm experiencing. We have somewheres around 15 DCs
in the domain. Two of them are on the local subnet. I recently retired one of
the two local DCs. Then I noticed that our Internet connection got real
slow--mainly a delay of, say, 20 seconds before a page would load. I started
poking around with DNS. If I changed the WAN card on the firewall to point at
an external DNS server, the web sped up a bunch. But you probably know that
this isn't a good arrangement and pretty soon thereafter we got other problems
happening. So I pointed DNS on the WAN card back to the LAN address on the
firewall. The other problems went away but slow access came back. So I poked
around on the firewall a bit and found that Domain Controllers computer set. I
noticed that the list in there was out of date, and both of the DCs on the
local domain that were in that list are now retired. So I'm guessing (maybe
incorrectly) that that somehow bears on this problem--like maybe the ISA server
is now trying to talk to DCs on remote subnets since it can't find the two DCs
on the local subnet. So I was hoping if I could edit that computer set I could
make the problem go away.
Anyway, that's what's happening. Maybe I'm way off base? Any
suggestions?
Rob
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder
Sent: Tue 3/6/2007 3:54 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: "Domain Controllers" in ISA 2004
http://www.ISAserver.org <http://www.isaserver.org/>
-------------------------------------------------------
The domain controllers computer set is one of the great
mysteries of the
ISA firewall. You won't find any documentation about it and
many will
deny its existance. Never bring it up in polite company.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore
> Sent: Tuesday, March 06, 2007 1:23 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: "Domain Controllers" in ISA 2004
>
> http://www.ISAserver.org <http://www.isaserver.org/>
> -------------------------------------------------------
>
> Can this field not be edited? Is the ISA server supposed to
> pick up the
> DCs automatically? What's the mechanism for that? Is there
> something in
> my configuration that's not allowing this to happen?
>
> Thanks,
> Rob
>
> -----Original Message-----
> From: Rob Moore
> Sent: Tuesday, March 06, 2007 1:18 PM
> To: 'isalist@xxxxxxxxxxxxx'
> Subject: RE: [isalist] Re: "Domain Controllers" in ISA 2004
>
> I have a stand-alone Standard edition server. I was trying to
edit it
> from the ISA 2004 console.
>
> Rob
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Tuesday, March 06, 2007 12:55 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: "Domain Controllers" in ISA 2004
>
> http://www.ISAserver.org <http://www.isaserver.org/>
> -------------------------------------------------------
>
> Where are you editing from; array or enterprise level?
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Rob Moore
> Sent: Tuesday, March 06, 2007 9:10 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] "Domain Controllers" in ISA 2004
>
> I have a Computer Set in my ISA 2004 called "Domain
Controllers." The
> list is inaccurate, and I think it's starting to cause us
> some trouble.
> But I can't seem to edit it. How do I make changes to it?
>
> Thanks,
>
> Rob
>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>
> Rob Moore
>
> Network Manager
>
> 215-241-7870
>
> Help Desk: 800-500-AFSC
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other
sites:
> http://www.techgenix.com <http://www.techgenix.com/>
> ------------------------------------------------------
> To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other
sites:
> http://www.techgenix.com <http://www.techgenix.com/>
> ------------------------------------------------------
> To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com <http://www.techgenix.com/>
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
