Re: SBS 2003
- From: <thekevin@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sun, 5 Jun 2005 15:43:43 -0500
I REALLY don't like to think about creating a single point of failure
anywhere,especially on my side of the Demarc. I get violent without access. I
would save your soon to be freed SBS machine for other applications that don't
require GPO control.
1.Thought about acquiring a few Eval copies of w2kAdv.Server and setting the
Bios clock CORRECTLY on install? ...this of course on recycled equipment that
is capable of carrying a server to begin with.You need DNS ,Netbios on your
internal NIC,{turn it and filesharing OFF on the External NIC},Include your
External NIC after install ! in your LAT>turn everything else OFF,then install
retail or Eval ISA2000/2004 on each.
2.Check out Amazon.com where and individual is selling Standard ISA2004{OEM}
for $150 delivered. No arrays but at least you can have some functional {junk}
fail over standing by WHEN ,NOT IF,your ISA hardware fails. AS in ,all hardware
will fail and it's seldom at a convenient time.
3.I assume you do realize the pitfalls of running ISA and anything else on the
same server so I won't bother to ramble on..........as in a Firewall needs to
be a FIREWALL,not a glorified attempt at client side applications running in
the background.
4. Your much better off,creating a seperate "ISA " new forest domain for your
ISA to run in as it will be the first compromised { in theory but not in
reality to my knowledge historically};Hence,the intruder will have to "start
all over" after compromising ISA which he probably thinks was/is your
web,exchange,etc. server.This gives you time to deploy your stand by {junk }
ISA machines for him to "get around"....as in where does your network begin and
end !!?!?
5.Surely, you won't install ISA as an Enterprise Admin{not an issue with
Standard version or stand alone install }as the compromise of that account nets
the entire forest{theoretically}.
thekevin
----- Original Message -----
From: Andrew English
To: [ISAserver.org Discussion List]
Sent: Sunday, June 05, 2005 2:04 PM
Subject: [isalist] Re: SBS 2003
http://www.ISAserver.org
Thanks Kevin,
Your response to this thread has been the most intelligent one so far. Too
bad Roy and Steve don't know the meaning of that. ;)
This company has two servers running SBS, their main one is running AD while
the other handles some old application crap which will get changed over soon
freeing up the server. Yeah we have the standard version of SBS; the one which
comes with Exchange and all the extra stuff on it. The main server also runs
Exchange 2003, other than that nothing else is really going on.
There is no copy of ISA 2004 installed YET. I am just weighing in the
possibility of installing it on the hardware they currently have available.
So what are my choices here Kevin?
Thanks
Andrew
------------------------------------------------------------------------------
From: thekevin@xxxxxxxxxxxx [mailto:thekevin@xxxxxxxxxxxx]
Sent: Sunday, June 05, 2005 1:27 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: SBS 2003
http://www.ISAserver.org
Best of my knowledge;
1.SBS products don't join existing domains,period = stand alone domain{s}
only.
2.I assume you have a standard version of SBS = no native ISA or
SQL.Hence,why was a copy of ISA2004 on it?...either way?
3. Installing on multiple machines will kill your CD key for both installs =
No great loss since it's SBS.
4.Yes,it is a stand alone product.
thekevin
----- Original Message -----
From: Andrew English
To: [ISAserver.org Discussion List]
Sent: Sunday, June 05, 2005 10:39 AM
Subject: [isalist] SBS 2003
http://www.ISAserver.org
If I install ISA 2004 on SBS 2003, can I take a second box install SBS on
it and join it to the domain (no run dcpromo) making it the ISA 2004 box or
does ISA have to run with everything else on the one SBS server?
Andrew
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
thekevin@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
andrew@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
thekevin@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
