Kevin sounds goods in telling you how to cr..k. If my understanding is corret, you are going to install on a freed server: OS: as part from SBS ISA2K4: seperately licensed one The answer must be negative logically! ----- Original Message ----- From: thekevin@xxxxxxxxxxxx To: [ISAserver.org Discussion List] Sent: Monday, June 06, 2005 4:43 AM Subject: [isalist] Re: SBS 2003 http://www.ISAserver.org I REALLY don't like to think about creating a single point of failure anywhere,especially on my side of the Demarc. I get violent without access. I would save your soon to be freed SBS machine for other applications that don't require GPO control. 1.Thought about acquiring a few Eval copies of w2kAdv.Server and setting the Bios clock CORRECTLY on install? ...this of course on recycled equipment that is capable of carrying a server to begin with.You need DNS ,Netbios on your internal NIC,{turn it and filesharing OFF on the External NIC},Include your External NIC after install ! in your LAT>turn everything else OFF,then install retail or Eval ISA2000/2004 on each. 2.Check out Amazon.com where and individual is selling Standard ISA2004{OEM} for $150 delivered. No arrays but at least you can have some functional {junk} fail over standing by WHEN ,NOT IF,your ISA hardware fails. AS in ,all hardware will fail and it's seldom at a convenient time. 3.I assume you do realize the pitfalls of running ISA and anything else on the same server so I won't bother to ramble on..........as in a Firewall needs to be a FIREWALL,not a glorified attempt at client side applications running in the background. 4. Your much better off,creating a seperate "ISA " new forest domain for your ISA to run in as it will be the first compromised { in theory but not in reality to my knowledge historically};Hence,the intruder will have to "start all over" after compromising ISA which he probably thinks was/is your web,exchange,etc. server.This gives you time to deploy your stand by {junk } ISA machines for him to "get around"....as in where does your network begin and end !!?!? 5.Surely, you won't install ISA as an Enterprise Admin{not an issue with Standard version or stand alone install }as the compromise of that account nets the entire forest{theoretically}. thekevin ----- Original Message ----- From: Andrew English To: [ISAserver.org Discussion List] Sent: Sunday, June 05, 2005 2:04 PM Subject: [isalist] Re: SBS 2003 http://www.ISAserver.org Thanks Kevin, Your response to this thread has been the most intelligent one so far. Too bad Roy and Steve don't know the meaning of that. ;) This company has two servers running SBS, their main one is running AD while the other handles some old application crap which will get changed over soon freeing up the server. Yeah we have the standard version of SBS; the one which comes with Exchange and all the extra stuff on it. The main server also runs Exchange 2003, other than that nothing else is really going on. There is no copy of ISA 2004 installed YET. I am just weighing in the possibility of installing it on the hardware they currently have available. So what are my choices here Kevin? Thanks Andrew ---------------------------------------------------------------------------- From: thekevin@xxxxxxxxxxxx [mailto:thekevin@xxxxxxxxxxxx] Sent: Sunday, June 05, 2005 1:27 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: SBS 2003 http://www.ISAserver.org Best of my knowledge; 1.SBS products don't join existing domains,period = stand alone domain{s} only. 2.I assume you have a standard version of SBS = no native ISA or SQL.Hence,why was a copy of ISA2004 on it?...either way? 3. Installing on multiple machines will kill your CD key for both installs = No great loss since it's SBS. 4.Yes,it is a stand alone product. thekevin ----- Original Message ----- From: Andrew English To: [ISAserver.org Discussion List] Sent: Sunday, June 05, 2005 10:39 AM Subject: [isalist] SBS 2003 http://www.ISAserver.org If I install ISA 2004 on SBS 2003, can I take a second box install SBS on it and join it to the domain (no run dcpromo) making it the ISA 2004 box or does ISA have to run with everything else on the one SBS server? Andrew ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: thekevin@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: thekevin@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: roy_tsao@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx