RE: Trust relationship

  • From: "cismic" <cismic@xxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 17 Aug 2001 14:15:49 -0700

Theresa,

The guy in the following article shares some great ways to make trusts
even more secure when using multiple domains:
http://www.microsoft.com/ISN/Columnists/using_ipsec.asp?A=0 

Same person:
The following link contains some great information covering the process
of securing domains across firewalls with out really using trusts.
http://www.microsoft.com/ISN/Columnists/P63623.asp?A=0

The following link contains useful information to assist with lots of
things.
http://www.microsoft.com/isn/default.asp 


Joseph 


-----Original Message-----
From: Greg Foulks [mailto:greg.foulks@xxxxxxxx] 
Sent: Friday, August 17, 2001 1:49 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Trust relationship

http://www.ISAserver.org


Theresa,
I had the same problem. I eventually bagged the idea of doing this and
just
made the ISA box part of the domain. Beware when doing this.... shutdown
all
the services that are not needed (File Print Sharing, Client for MS
networks, Remove IIS, etc...)

Greg Foulks, MCP
NewFound Technologies, Inc.
http://www.nfti.com
Email: greg.foulks@xxxxxxxx
Voice: 614.318.5036
Fax: 614.318.5005


-----Original Message-----
From: Theresa Call [mailto:tcall@xxxxxxxxxxxxxx]
Sent: Friday, August 17, 2001 4:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Trust relationship


http://www.ISAserver.org


For added security I have set up our ISA server in a seperate forest
from
the other domains on the network.  According to the Shinder "ISA bible"
I
will need to set up a one-way trust relationship with the ISA domain
trusting the domain where the user and client computer accounts are
located.

How specifically do I accomplish this?  When I establish a trust either
direction the user domain verifies that all is ok, but the ISA domain
comes back with an error that it can't find the RPC on the Primary
Domain
Controller.  I've checked the services running on both domains and RPC
appears to be functioning.

Detailed help will be very much appreciated.

Thanks!
Theresa

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
greg.foulks@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: