Yes, That's true. What I have done (even with an AD integrated ISA machine) is to terminal service into the ISA machine, then from that machine launch another TS session to get to other machines behind the firewall. Not sure if this is a great way to do it or not, but it can work on a AD network even if the ISA is not part of that network. regards, Mark ----- Original Message ----- From: "Christian Villeneuve" <Christian.Villeneuve@xxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, November 12, 2001 10:53 AM Subject: [isalist] Re: New Configuration http://www.ISAserver.org Part of the reason why I am asking about Active Directory, is because I have terminal Services running on another Server and I was going to set up a VPN on the ISA server. The part I am not sure about is authentication. If I don't have Active Directory, I think I would have to setup any of the users on the ISA server itself to allow them access. Is this correct? -----Original Message----- From: Mark Strangways [mailto:strangconst@xxxxxxxx] Sent: Monday, November 12, 2001 10:37 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: New Configuration http://www.ISAserver.org Some say "leave it as a member", due to AD security issues. If the ISA where hacked then the hacker would have access to ad. You could ofcourse have a separate AD domain for your ISA server, but that's a bunch of overhead. Why do you want to make it AD , do you plan on an enterprise array at some point ? I think I prefer to have it standalone myself, for what that's worth. regards, Mark ----- Original Message ----- From: "Christian Villeneuve" <Christian.Villeneuve@xxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, November 12, 2001 10:25 AM Subject: [isalist] New Configuration http://www.ISAserver.org Hello everyone, I am configuring a new Server to run ISA only instead of having it on my Exchange and IIS server. I still have to put a second NIC on the Server, but I was wondering if anyone recommends if I should install Active Directory, or leave it as a member Server. What would the recommendations be? Thanks, Christian ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: strangconst@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: Christian.Villeneuve@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: strangconst@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')