RE: Domain change and ISA server???
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 8 Apr 2003 17:37:24 -0500
Hi Mihnea,
The ISA Server doesn't use a machine certificate to listen for internal
Web sites, it uses a Web site certificate. If you marked the keys are
exportable, you can back it up from there, or you can copy it from the
Web site if you didn't delete it from the Web site.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Mihnea D. Mironescu [mailto:MihneaM@xxxxxxxxxxxxxx]
Sent: Tuesday, April 08, 2003 7:07 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Domain change and ISA server???
http://www.ISAserver.org
The settings would be easly migrated to the new install by using the
ISAExportImportScript.vbs.
The thing I am more skeptical you can migrate is the machine certificate
used for SSL authentication. Since this is a machine certificate, you
cannot
export it (the private key is marked as not exportable by default), so
you
need to reconfigure the SSL listners once you reinstall ISA Server.
Anyway, if the certificate will be issued by the same CA as the old one,
no
change would be required on the client's side.
--------------------------------------------------
Mihnea Mironescu
Tel.: +40-21-221-9175
Mobil: 0722-564-403
--------------------------------------------------
-----Original Message-----
From: Terzano, Thierry [mailto:Thierry.Terzano@xxxxxxxxxxxxxxxx]
Sent: Tuesday, April 08, 2003 11:09 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Domain change and ISA server???
http://www.ISAserver.org
Hi Thomas,
Ok, if I take this option, as my living configuration works fine, I'd
like
to perform a backup of it and import it on the new ISA server..... in
order
not to manually re-enter all my clients IP, and sites, and certificates,
and... As I never perform it (no needs until now), is it something sure
or... Do you have a strong method to be sure to recover a "valid"
configuration?
And now, why uninstall, disjoin, and reinstall a fresh ISA server??? Is
it
something that stays on the configuration of this ISA server and that
will
disturb me later?
Thanks for your past and future answers.
Thierry
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, 8 April 2003 02:57
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Domain change and ISA server???
http://www.ISAserver.org
Hi Thierry,
I would uninstall ISA Server before leaving the domain, then reinstall
and authenticate to the new domain to or uses in the local SAM.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Terzano, Thierry [mailto:Thierry.Terzano@xxxxxxxxxxxxxxxx]
Sent: Monday, April 07, 2003 12:36 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Domain change and ISA server???
http://www.ISAserver.org
Hi the list,
I'd like to be lightened on this:
I have an ISA server (Standard Edition under Firewall mode) installed
and joined to a domain Dom1.
In parallel, I mounted a new domain Dom2 that uses my firewall as the
gateway. All works fine.
My problem now is that the domain Dom1 will be completely deleted... and
so, I fear about my firewall... behaviour.
I use the VPN feature right now, and as users have the same password on
the both domains, their VPN connection (done through Dom1 recognition)
is allowed with their Dom1 account, and after that they can do what
their account rights allows them on the both domains (same account, same
password).
But now, as Dom1 will disappear, I have to disjoin my firewall server
before to kill the last DC... and I'd like to let ISA in stand alone.
So, can someone tell me if my VPN configuration will survive or if I
have to totaly redo it? And what about the accounts? Have I to create
accounts on ISA for VPN authorisation or may I use the ones of my new
domaine Dom2?
Thanks a lot in advance
Thierry
Free Trial Software: Monitor & Manage Web Use with SurfControl Web
Filter for MS ISA Server http://www.surfcontrol.com/go/zisadl1
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Free Trial Software: Monitor & Manage Web Use with SurfControl Web
Filter
for MS ISA Server http://www.surfcontrol.com/go/zisadl1
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
thierry.terzano@xxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Free Trial Software: Monitor & Manage Web Use with SurfControl Web
Filter
for MS ISA Server http://www.surfcontrol.com/go/zisadl1
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mihneam@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------------------------
----
This email and any attached files are confidential and may be legally
privileged. If you are not the addressee, any disclosure, reproduction,
copying, distribution, or use of this communication is strictly
prohibited.
If you have received this transmission in error please notify the sender
immediately and then delete this email from your system.
Email transmission cannot be guaranteed to be secure or error free as
information could be intercepted, corrupted, lost, destroyed, arrive
late
or incomplete, or contain viruses and therefore Papastratos Romania
SRL does not accept legal responsibility for any errors or omissions in
the contents of this message which arise as a result of email
transmission.
If verification is required please request a hard copy version.
------------------------------------------------------------------------
----
Free Trial Software: Monitor & Manage Web Use with SurfControl Web
Filter for MS ISA Server http://www.surfcontrol.com/go/zisadl1
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
