Then, as a fall-back option, look for the isolation using IPSec whitepapers on Microsoft site. I can't find them now, but I know that they exist. They show you how to restrict communication with a specific server or network using IPSec.
 

Sincerely,
   _____                               
  (, /  |  /)               /)     /)  
    /---| (/_  ______   ___// _   //  _
 ) /    |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/                             /)     
                               (/      
Microsoft MVP - Directory Services
www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon


From: Lucas, Bryan
Sent: Tue 9/12/2006 9:18 AM
To: [email protected]
Subject: [ActiveDir] Isolating a DC

I’d like to isolate a DC from regular user authentication.  I only want certain applications/processes using it.  Obviously it will need to replicate with the other DC’s.  I don’t have an interface on the firewall to use, so I would probably have to do something software based on the DC itself.  Any recommendations on what to read, how to isolate it and what ports are required?

 

Bryan Lucas

Server Administrator

Texas Christian University

 

Reply via email to