Hi Wendy, Some recommendations: 1. Remove all external DNS servers from the ISA firewall's interfaces 2. Configure an internal DNS server to resolve Internet host names 3. Make sure the internal DNS server address on the internal interface has knowledge of your Active Directory domain 4. What do you mean by "locate" IAS, CA and other servers? HTH, Tom www.isaserver.org/shinder Get the book! Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Wendy [mailto:cw_lin@xxxxxxxxx] Sent: Thursday, August 05, 2004 12:15 PM To: [ISAserver.org Discussion List] Subject: [isalist] How to configure Active Directory with ISA 2004 http://www.ISAserver.org I installed ISA 2004 on Windows 2003 server. This server belongs to a workgroup and not a member of AD domain ( for security reason). The ISA server has three NICs: external NIC has default gateway and external DNS, DMZ NIC only has IP address, mask, no default GW, no DNS address, Internal NIC has IP address, Mask, no default GW, and Internal DNS address (which is Windows 2003 AD domian Controller). Please let me know, how to configure the ISA 2004 to access Active Directory and also to locate IAS, OWA2003, or CA other servers. Thanks, Wendy ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist