Re: Mixing authentication modes on ISA Server 2K

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jim Harrison [MSFT] (jmharr_at_online.microsoft.com)
Date: 04/18/04 

Date: Sun, 18 Apr 2004 15:38:08 -0700

Did you configure a single NIC with two IPs or install another NIC? 

-- 
 Jim Harrison [ISASE]
 Read the help, books and articles!
 This posting is provided "AS IS" with no warranties, and confers no rights.
"Bob" <voelker42@yahoo.com> wrote in message news:4ed300c9.0404181109.5e4964ad@posting.google.com...
Jim,
I tried this and initally it worked like a champ!  Then...the OS
decided to have a seizure due to having dual homed on the internal
network.  Is there a reg entry or setting that a ISA can be dual homed
and still talk to the DC's through one nic?  Or do I need to separate
the networks.
Thanks for your help!!!
-Bob
"Jim Harrison [MSFT]" <jmharr@online.microsoft.com> wrote in message news:<eAKTONOJEHA.3576@tk2msftngp13.phx.gbl>...
> Actually, that might work, if GPO allows per-user IE settings...
> Let me know how it turns out.
>
> -- 
>  Jim Harrison [ISASE]
>  Read the help, books and articles!
>
>  This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Bob" <voelker42@yahoo.com> wrote in message news:4ed300c9.0404171114.146f3923@posting.google.com...
> I agree....but I thought of a possible solution....
>
> Can I multihome the ISA on the internal side.  So the ISA proxy would
> have two NIC's accessible say 10.1.1.1 and 10.1.1.2.  Set up Basic/Int
> on 10.1.1.1 and basic only on 10.1.1.2 and then auto config the
> browser settings with policies in AD based on user?
>
> Would there be any Domain auth/communication issues from ISA (non-DC)
> to the other DC's?
>
> Thanks again!
>
> -Bob
>
> "Jim Harrison [MSFT]" <jmharr@online.microsoft.com> wrote in message news:<u5Utta#IEHA.3040@TK2MSFTNGP10.phx.gbl>...
> > This is a classic chicken-and-egg problem.
> > How are you to decide which authentication method to apply to the user until know who the user is before you've authenticated 
> > them
> > using an authentication method you can't apply until you know who they are?...
> >
> > (don't try this at home; I'm a professional)
> > :-)
> > -- 
> >  Jim Harrison [ISASE]
> >  Read the help, books and articles!
> >
> >  This posting is provided "AS IS" with no warranties, and confers no rights.
> >
> >
> > "Bob" <voelker42@yahoo.com> wrote in message news:4ed300c9.0404160816.42f62e11@posting.google.com...
> > Is it possible to have Authentication method based on user?  For
> > example...If I want a person that is an average employee to log in
> > (BASIC AUTH) all the time, no matter where they go. And then, I would
> > like the CEO and those people to use Integrated Auth and no have a log
> > in.  Is that possible?  If not any other suggestions are welcome!
> >
> > p.s. Other details (ISA 2K running on Win2k3, mixed clients XP/98/Mac
> > OS X/UNIX)
> >
> > Thanks!!!!!
> >
> > -Bob

Relevant Pages