Re: ISA > ISA Client > Configuring laptops

From: Javier Gomez [SBS MVP] (javier_gomez_at_remove.this.engineer.com)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 00:04:10 -0400

Very cool Chad (especially the idea with the CMAK). Now we can start saying
"CCST" too! :^)

Cheers, 

-- 
Javier [SBS MVP]
<< SBS ROCKS !!! >>
"Chad A. Gross [SBS MVP]" <chad.gross@laytonflower.nospam.com> wrote in
message news:%23hxDrUlXEHA.2500@TK2MSFTNGP09.phx.gbl...
> Ok Guys -
>
> Here's a few scripts I used with VPNs on SBS2k.  With SBS2k, I used the
CMAK
> to create my own custom VPN connectoids - and included these scripts in
the
> connectoid.  As a result, the connectoid would enable the firewall client
> once the VPN was connected, and disable it once the VPN was disconnected -
> so it was completely invisible and transparent to the end user.
>
> Change the .txt extensions to .vbs and you're good to go . . .
>
> -- 
>
> Chad A. Gross - SBS MVP
> SBS ROCKS!
>
> www.msmvps.com/cgross
> www.gosbs.org
>
>
> Les Connor [SBS MVP] wrote:
> > I'm pretty sure Jeff will have this on the YCST SBS Powertools list,
> > but please send it to him just in case ;-).
> >
> >
> > "Javier Gomez [SBS MVP]" <javier_gomez@remove.this.engineer.com>
> > wrote in message news:e2mK%230kXEHA.2664@TK2MSFTNGP09.phx.gbl...
> >> I like Chad's idea better... but, anyway:
> >>
> >> I researched this a while ago and I guess if you know how to make
> >> scripts, ect. you can do this easily (actually, I would like to try
> >> it with GPOs and a logoff script, so it would be completely
> >> transparent to the user).
> >>
> >> For disabling the firewall client->
> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Firewall Client\Disable
> >> Set the vaule to 1 for disable and 0 for enabling it.
> >>
> >> For disabling the proxy client->
> >> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
> >> Settings\ProxyEnable
> >> Set the vaule to 0 for disable and 1 for enabling it.
> >>
> >> When I tested this I just had an ugly reg file which was loaded "on
> >> demand" :-)
> >>
> >> If you do something nicer... please post it.
> >>
> >> --
> >> Javier [SBS MVP]
> >>
> >> << SBS ROCKS !!! >>
> >>
> >> "Jeff L" <newsgroupsremoveandunderscore_jeff@availabletech.net>
> >> wrote in message news:eT22o8iXEHA.2408@tk2msftngp13.phx.gbl...
> >>> Excellent post... the options are so many... I guess you could
> >>> create a logon script that would conditionally turn on proxy
> >>> clients.
> >>>
> >>> Have you created any scripts I might look at?
> >>>
> >>> "Chad A. Gross [SBS MVP]" <chad.gross@laytonflower.nospam.com>
> >>> wrote in message news:u7PggKhXEHA.376@TK2MSFTNGP10.phx.gbl...
> >>>> Hi Jeff -
> >>>>
> >>>> Anymore, I don't configure laptops as firewall clients if they're
> >>>> out of the office all the time.  What I do is to create a DHCP
> >>>> reservation for each laptop, then create a Client Address Set in
> >>>> ISA which contains the IPs of the laptops.  I then create a
> >>>> Protocol Rule that allows the necessary protocols for the Client
> >>>> Address Set I created.  You still get activity logging - but you
> >>>> only get the laptop IP, not the username.  If you want to go one
> >>>> step further, you can edit the HTTP Redirector Filter to forward
> >>>> web requests from SecureNAT clients directly to the web instead of
> >>>> the proxy service.  This will allow your laptops to browse the web
> >>>> without configuring proxy settings as well . . .
> >>>>
> >>>> Or - you could have two scripts, one that enables the firewall
> >>>> client and configures proxy settings, and one that disables the
> >>>> firewall client and clears the proxy settings.  Put shortcuts on
> >>>> the desktop, and have the user run the first script when they need
> >>>> internet access at the office, and the second when they need
> >>>> internet access outside the office . . .
> >>>>
> >>>> --
> >>>>
> >>>> Chad A. Gross - SBS MVP
> >>>> SBS ROCKS!
> >>>>
> >>>> www.msmvps.com/cgross
> >>>> www.gosbs.org
> >>>>
> >>>>
> >>>> Jeff L wrote:
> >>>>> Hello,
> >>>>>
> >>>>> Want to use ISA internally but the ISA client interferes with the
> >>>>> mobile nature of the organization. Is it possible to use ISA
> >>>>> client on Laptops that not always connected to the LAN.
> >>>>>
> >>>>> The use of VPN is often blocked.
> >>>>>
> >>>>> Thanks for any help,
> >>>>>
> >>>>> Jeff Loucks
> >>>>>       Available Technology ®
> >>>>>            Solutions For Professionals ®
> >>>>>                  www.availabletechnology.com
>
>
>

Relevant Pages

  • Re: DynDNS - wich Rule/Ports in ISA?
    ... > I made alleready a test with a rule wicht uses Port 80 TCPIP. ... >> Which DDNS client are you using? ... >> router in front of ISA and that tool is for when the external ISA ... >> Javier [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: WSUS v2 client and high CPU fix
    ... A side-effect of installing the v.3 client Update Agent, ... v.2.01 Microsoft Baseline Security Analyser fails to scan workstations for ... Les Connor [SBS MVP] ... high CPU is still there, but the machine remains responsive, although ...
    (microsoft.public.windows.server.sbs)
  • Re: dynamic ip
    ... > SORBS is a well intentioned group that ends up being a poorly implemented ... > "Jerry Dubuke" wrote in message ... >>> If your client has a firewall that has a built-in DDNS client... ... >>> Javier [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: WSUS v2 client and high CPU fix
    ... Les Connor [SBS MVP] ... many of the SBS MVPs tested this client and provided direct ... high CPU is still there, but the machine remains responsive, ...
    (microsoft.public.windows.server.sbs)
  • Re: Print spooler stops when disconnecting from Terminal Services
    ... but you still have to deselect it when using the client from a new ... Les Connor [SBS MVP] wrote: ... we regularly remote desktop into the server to perform administrative ... the session is deleted, the print spooler stops. ...
    (microsoft.public.windows.server.sbs)