• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Configure your ISA Server for a Very Large Number of Authentication Requests

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> General >> Configure your ISA Server for a Very Large Number of Authentication Requests Page: [1]
Login
Message << Older Topic   Newer Topic >>
Configure your ISA Server for a Very Large Number of Au... - 29.Jul.2002 4:36:00 PM   
lemonwater925

 

Posts: 417
Joined: 22.Mar.2001
From: North of the 49th
Status: offline
Just saw this Qarticle and wonder if anyone has tried it.

HOW TO: Configure your ISA Server for a Very Large Number of Authentication Requests
The information in this article applies to:
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Server
Microsoft Internet Security and Acceleration Server 2000, 2000 SP1

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
Q256986 Description of the Microsoft Windows Registry
IN THIS TASK
SUMMARY
Add a Registry Key
REFERENCES
SUMMARY
This step-by-step article describes how to improve authentication throughput on your ISA Server.

If the Internet Security and Acceleration Server (ISA) computer is using NTLM or Basic authentication for a large number of Web clients, you may experience poor performance. This does not occur when authentication is turned off.

You can improve the authentication throughput by increasing the number of concurrent authentication calls that are in progress at one time between the ISA Server and the domain controller.

back to the top
Add a Registry Key
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To increase the number of concurrent authentication calls in progress at one time between the IAS server and the domain controller:
Start Registry Editor. To do this, click Start, click Run, type Regedt32.exe, and then click OK.
Locate the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
On the Edit menu, click Add Value, and then add the following registry information (where 5 represents the heaviest loads):
Value Name: MaxConcurrentApi
Data Type: REG_DWORD
Value: between 2 and 5
NOTE: If value that you assign to MaxConcurrentAPI is too high, the ISA server can put a heavy load on the domain controller.

You can also use more ISA servers in an array to load balance the Web requests and authentication and increase performance. back to the top
Post #: 1

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> General >> Configure your ISA Server for a Very Large Number of Authentication Requests Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts