Re: Moving IAS to new server

From: James McIllece [MS] (jamesmci_at_online.microsoft.com)
Date: 08/23/04

  • Next message: anonymous_at_discussions.microsoft.com: "How to setup IAS to restrict user access to certain servers" 
    Date: Mon, 23 Aug 2004 11:41:51 -0700

    "Mike B." <Autobahn97@hotmail.com> wrote in
    news:OX4POyihEHA.712@tk2msftngp13.phx.gbl:

    > I've been handed an old Win2000 IAS server that I need to move to
    > another server since its on almost 6 year old hardware! Is there a
    > way to migrate it easily or do I need to simply install IAS on a new
    > Win2000 server and recreate each RAP manually. The kicker is that we
    > use EAP for SmartCard authentication against a non enterprise Win2000
    > CA. Any help is appreciated since this is new to me. Thanks!
    >
    >
    >

    Probably the easiest approach is to install W2K on the new hardware, then
    install IAS.

    On the old server export the IAS configuration to a file using netsh
    commands.

    Copy the file to the new server and use netsh commands to import the IAS
    configuration.

    >From the IAS Help:

    To copy the IAS configuration to another server:

    At a command prompt, type netsh aaaa show config <path>\file.txt. This
    stores the configuration settings, including registry settings, in a text
    file. The path can be relative, absolute, or a UNC path.
     
    Copy the file you created to the destination computer, and at a command
    prompt on the destination computer, type netsh exec <path>\file.txt. A
    message appears indicating whether the update was successful.

     Notes

    You do not need to stop IAS on the destination computer to run the netsh
    exec command. When the command is run, IAS is automatically refreshed with
    the updated configuration settings.
     
    This procedure will not work if the source and destination computer are
    running different versions of Windows 2000.

    This procedure replicates all IAS, remote access policy, registry, and
    logging configuration. 

    -- 
James McIllece, Microsoft
Please do not send email directly to this alias.  This is my online account 
name for newsgroup participation only.
This posting is provided "AS IS" with no warranties, and confers no rights.
  • Next message: anonymous_at_discussions.microsoft.com: "How to setup IAS to restrict user access to certain servers"

    Relevant Pages

    • Re: Redundant IAS servers
      ... > additional IAS servers as RADIUS clients to my central IAS ... > server but that is not the redundancy I'm after. ... central IAS server configuration to a file, ...
      (microsoft.public.internet.radius)
    • Re: IAS with PEAP and Airespace (now Cisco 1000)
      ... For what it's worth, we also tried using EAP-TLS (I changed the IAS, created ... >> I've gone over our configuration many times, ... > or they do not trust the CA that issued the server certificate to the IAS ...
      (microsoft.public.internet.radius)
    • Re: Cisco Router --> IAS Authentication
      ... > The problem I'm having is when server A's IAS service is started, ... There may be some configuration difference between the two servers. ... Copy the file you created to the destination computer, and at a command ...
      (microsoft.public.internet.radius)
    • Re: Anyone on RAS services???
      ... Sorry about the IAS part. ... >>for Windows Authentication using Server ... >>> RAS configuration and recreated but back to same ...
      (microsoft.public.win2000.ras_routing)
    • Re: Text mode in init 5! NVIDIA drivers
      ... using the X configuration tool provided by ... If this machine is really going to be a server, ... enter "setup" on the command line, then navigate the menus until you ...
      (linux.redhat.install)