Hi Joe, 1. Click Start and then click the Run command. 2. In the Run dialog box, enter dcpromo in the Open text box and click OK. 3. In the Wizard pages that follow, demote the machine from a domain controllor. 4. Go to a machine behind the ISA firewall, and repeat steps 1 and 2, this time using the Wizard to promote the machine to a domain controller 5. Join the ISA firewall to the domain created on the DC *BEHIND* the ISA firewall 6. Tell your friends that if you want your firewall to be a domain controller, put the DC on the pix server HTH, Tom Thomas W Shinder, M.D. Site: www.isaserver.org Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: joe silva [mailto:jsilva@xxxxxxxxxxx] Sent: Tuesday, February 07, 2006 9:52 AM To: [ISAserver.org Discussion List] Subject: [isalist] Windows Logon http://www.ISAserver.org What protocals do i have to allow on my ISA server to allow users to log on to the domain. DC and ISA are on the same server Thanks, Joe ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx