RE: ISA server on a DC
- From: "Greg Mulholland" <gmulholland@xxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 23 Dec 2003 21:49:39 +1100
I guess you are right Phil
You could always use that scenario having isa in its own domain. My
general rule of thumb is to keep the firewall off DC's but yes that
would work.
Greg
-----Original Message-----
From: Phill Hardstaff - SPC [mailto:phillh@xxxxxxx]
Sent: Tuesday, December 23, 2003 8:41 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA server on a DC
http://www.ISAserver.org
OK, heres a question for you guys :
1) You want to authenticate your proxy server requests.
2) You are running an NT4 domain (yes there are still plenty)
3) You only have ONE box to install ISA on.
OK, how are you are going to get authentication requests from the ISA
box to your NT4 domain ? knowing full well that ISA cannot be installed
on NT4 and therefore cannot be part of an NT4 domain ? and you certainly
don't want to install ISA on a Win2K member server in your domain (well
you wouldn't would you ?)
Think about it ? I know one solution, and it involves what you are
saying not so do below. i.e. install ISA in it's own domain as a DC, and
have a one way trust with the NT4 domain, i.e. the NT4 domain is trusted
by the ISA box but the ISA domain is not trusted by the NT 4 domain. If
you know of any other way to get this work I would be interested.
What I am saying is that installing on a DC in certain situations is not
a problem (DC in it's own domain), everyone always seems to assume it's
the DC for the main and only domain :) and this may well be what this
guy was talking about, then again it may not.
Cheers
Phill
----- Original Message -----
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, December 23, 2003 2:59 PM
Subject: [isalist] RE: ISA server on a DC
http://www.ISAserver.org
Hi Ryan,
I highly recommend against it. It might work, but I didn't test that
config. The point of that article was to show people how it could work,
but I hope it didn't give the impression that I approved of the config.
HTH,
Tom
-----Original Message-----
From: Ryan Palmer [mailto:RyanPalmer77@xxxxxxxxx]
Sent: Monday, December 22, 2003 4:11 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA server on a DC
http://www.ISAserver.org
I was just reading the article about installing ISA on a Domain
Controller. In the article they promoted the server to a DC before
installing ISA. Can I install ISA on my server and promote it to a
Domain Controller at a later date?
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
phillh@xxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
