Welcome to ISAserver.org

RE: How to work around an issue with VPN clients and split DNS

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> RE: How to work around an issue with VPN clients and split DNS

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: How to work around an issue with VPN clients and sp... - 3.Apr.2008 9:30:18 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Miguel,

Check out Stefaan Pouseele's blog, he has a Registry fix for that.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to miguel_gonz)

Post #: 21

Featured Links*

RE: How to work around an issue with VPN clients and sp... - 18.Sep.2008 11:26:54 AM

sketchy00

Posts: 18
Joined: 8.Aug.2008
From: Bellevue, WA
Status: offline

The screen captures for implementing this in the CMAK were very helpfull, but I do have a few questions if you don't mind.

1. In the Edit Custom Action for "Change Binding Order for RAS" the parameters is set to %ServiceDir%\KB311218.vbs. What do you suggest this %ServiceDir% parameter be set to? Or, what is the easiest method so that the vbs will be available to the user and their remote client if I give them a new CMAK bundled VPN configuration?

2. The discussions from this article talk about pre-connect and post-connect. Can you clarify which type of action this should be set to? It seemed as if there are some differences of opinion.

3. Is the KB311218.vbs still the recommended script to use, or would you suggest using the "ISA_DNS_Binding_Order.vbs" posted out on isatools.org?

Thank you so much for your help on this.

_____________________________

- sketchy

(in reply to spouseele)

Post #: 22

RE: How to work around an issue with VPN clients and sp... - 23.Sep.2008 8:36:47 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Since the action only needs to be performed once, you could do it as a pre-connect action, or, if you have have domain members, you can use Group Policy. Or, if you have another software deployment solution, you can use that.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sketchy00)

Post #: 23