• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

connect to configuration storage server

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> General >> connect to configuration storage server Page: [1]
Login
Message << Older Topic   Newer Topic >>
connect to configuration storage server - 24.Sep.2008 1:07:48 AM   
gping

 

Posts: 11
Joined: 22.Jan.2007
Status: offline
I was running ISA 2004 EE on a domain member server. However when I dis-joined the server from the domain, I could not get into ISA server management as it could not auto-connect to configuration storage server. I ran from Tasks "Configuration storage server connection wizard"  > Location=local > credential of logged on user  or  previous  domain / administrator, still could not connect - "You dont have permission".
Pls someboy help me on the issue. Thanks a lot.
Post #: 1
RE: connect to configuration storage server - 24.Sep.2008 4:05:27 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Why did you disjoin it from the domain?

It sounds like you have configured your CSS to use Windows authentication which is normal when the array members and CSS are part of the same Windows domain. In this mode, array members and the CSS authenticate using Kerberos.

Now that the array member is not a domain member, Kerberos authentication will fail and hence you will not be able to connect to the CSS.

So, I guess you have two options:

1) Rejoin ISA to the domain.
2) Configure ISA to use a workgroup model which uses certificate based authentication as opposed to Kerberos (Windows).

The following doc is for ISA2k4 workgroup configuration, but is still valid for ISA2k6; this may help if you go for option 2.

http://technet.microsoft.com/en-us/library/cc302483.aspx

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to gping)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> General >> connect to configuration storage server Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts