Remote Administration of ISA Server 2004

Remote Administration of ISA Server 2004

If you are like me and despise switching between eight or more Terminal Services sessions, even on a dual monitor setup. Then you will probably be aware of the "lovely" ability to install remote admin tools on your XP or other desktop machines. For those of you who have never attempted it or would like to be able to do it on ISA 2004, here it is.

• Published: Apr 11, 2004

• Updated: Jun 16,2006

• Section: Tutorials :: Configuration - Security

• Author: Greg Mulholland

• Rating: 3.8/5 - 82 Votes

Remote Administration of ISA Server 2004 by Greg Mulholland

For more information about Windows Terminal Services, please visit MSTerminaIServices.org.

If you are like me and despise switching between eight or more Terminal Services sessions, even on a dual monitor setup. Then you will probably be aware of the "lovely" ability to install remote admin tools on your XP or other desktop machines. For those of you who have never attempted it or would like to be able to do it on ISA 2004, here it is.

First and foremost, we have to enable the server to be administered remotely. These steps will need to be done either at the console or through Terminal Services or mental telepathy if you have that enabled. To edit the System Policy we need to open our ISA Management Console and right-click on the Firewall Policy node and as the name suggests, choose Edit System Policy.

Cache Add-ins,'=========I[·········

General' New

Edit System POliCY, ..

(;J 1iI.t Vf.

As you go down the list you will see a group called Remote Management and under that you will see Microsoft Management Console (MMC). You must put a tick in the checkbox in this option to enable it.

1 de 10

Remote Administration of ISA Server 2004

- l,i:Irj.t!fftal ~"i!W!I~ o vr!:Ui!ll PI'IY_ No!

13~~ ~ GD!;~

oQ ~1l:;;

[j G51er.!!ll

---

'511 ~ t ",ill iJ'qjJ("l' fthtilt

~i!lIl"gnll

E~tl-u.~~iii~p~""'! 1~~i;li1SA S~m Iiitm il~I"'~L CII::k.lliI:i 'f.iDili' tID im ~ IIhI:I ~o!i* ~!bi..l!;;!'Mt.iCLol! ~ ISA 'S.a~, i~

r..-~~~ OHO!

~,

~ ~nIlbi&n. ~~ Adm: Cft,[t«r RI:IDlJ.ti R~'~--m

6liR~~

+1 'V1!'!'OOt! ~ I--':-(_~] ~0Icrii; Il'~~~~ ~~~

ICH!'

~Nel:Mmi ~~Erl'lii'~ LI:I!:I!Jm 1i!_~~(NeI R~~~

~~~" '.::J

~I

In the FROM tab you can specify one or more computers for which you would like to enable Remote Administration from. Here I have shown that you could either allow all users from the "internal" network or just one or more single computers.

2 de 10

Remote Administration of ISA Server 2004

!:io'!nI!llem J.I'lJrl~\I' ldJt!:u

--------

15i~~ ~

Dlli B~i:In~"WH ~or~O!Y Ftil.iMi.i!l

~~mi

B R.i!iI'II01L8~

.1 T~~ 1aNI'[~

a n~Oi!MI:

flrllWfll !i3Mt ~

~ijI;;~~ 1a;Ifi'

~, I'MWi:iiI--~~ ",",tlidt lEtro)! ~

~

~9I'd~ ~I[(N!! ~!iIMl:fJ ~I[M

- Ri!I'OOt8 ~Ifi!ll ..;d

ij~~~ 41ftt8M

a our;;__·n_1

0. 1tFb!J.lll Pmr.:.li~ Iii:; 5t-~ €d'1I!ii'-!tJm

1\!o!I;i!/l:liikt;,

~1C:dv:!' oQ M:i-ra I !f.enei;l!Ii

AM ..

_L _C*:_" - _II ~

You will also need to specify who the ISA Firewall Administrators are. To do this, in the General node choose "Delegate User Roles and Permissions". From there you can add or edit your firewall administrators.

3 de 10

Remote Administration of ISA Server 2004

i'ikri:i IDIflI

~ ~ Fi"o!!WiSI ~

G1 'Ut!Mi RN .. ~~ (1M«! 8.~C~~

d-~

~

"g~

['] ~~

-11idlrl1!: i'iIrl~]III. C~l'It :r.pp11[iMllIiI1i r--: ~llfi;j~

1Yl~~!!~~~;

Sdix:I; ~ ~ ~~ IIW'O O!f g~ t];l ~,.~ W¥t ~~,,~~ ~QI!

~'-.- I. fdi; .. -

.~~-- ~.I'~

~I .

-.

Excellent, so we have configured our firewall for remote administration. Now, obviously, we need to install the tools onto the local computer. To do this we use the ISA Server 2004 CD. Just run the setup the usual way on you're the local computer, however, when you get to the menu options you should choose "Custom Setup".

4 de 10

Remote Administration of ISA Server 2004

M~

lnternet ~ecuri"ty& ,Acceleraltl~on Server'2oo4 Sta:n dardEditi~on

UU nch ~s~. 8e t'o'e~ setup, Be slJiIre to read~lhe re.le'!lse mJoles nl'$l,

R e\!l@lW' hli'~~a!; a Notes

IIBma :211

Swup

Pre req 1I1 s.lte'~

RIB ad S~~ LJp ,Do,ril!1 lFealur.e Guide

,-,- ~tl(J~ _ _

WiIflClOWS senl',er System

€)20[)ll,2DM Pi.!liilm$oll OIiiipCr.lMIi. AUI ~ht!; aG~.

In stall ISA Sel\!'l8 r .£/'IC""""-->I 2004

In the Custom Setup you should choose only the ISA Server Management and hit "Next"

5 de 10

Remote Administration of ISA Server 2004

The ]'JIstalaljarWlilard Is prcopes_ with ~S~l!p",5'fOII{u.~

(!!L:iI!;gm ~etu,iJ

~eIe!I!t the plNJIJam Fea.ture5 'f'lU WiJlliI to IFISt.aIl.

IM~

lin'

~(~'C-~-k-~-.-~-.-~-~-,·-!~-~-.e-'I~--~-.-'--I~-'-~-_-ct-h-o-w-~-~--w-~--~-.I-~-~--ed-.--~~~------~----

Staw

The necessary files will be installed and you will be on your way to remote admin glory, (yes, it's a true form of glory).

6 de 10

"'fe~~e,jDe!:clttl«! .-

1I'!1e !5',i\_5efvef M~gero!nI: e~le::; yW' Iii) use the tnl!i"~ll~t OO~o'!IH~ ~~i'ilorily m.~e['SA Setf¥er, _

I~' 15,1\ ser~· ~_~1'IIl: ""ewetll CIiJ>nt I~~~io;m ~re MesS'age Soilreer.ell"

iLaIU'i'lci1 BeSi!!Jr~ r,el'a'lIse

1'I'tis !\ol:Slure r--e!1uire!';:O I;j; ori )'~~d"",iIi~,

canrel

'I!'I~

'Vlhrm:~SeI'!.!',er SysteM

e 2001)·,2004 MJcnlsoft CollJ)lll1l!tiDm, AI ngb~ fltse.il'll'ed!

Remote Administration of ISA Server 2004

Mf:cr~R-

Ilntlti .Ace:

Stane

Now the only thing that is left to do is open your ISA Management Console and go to the Action menu and choose "Connect to". Type in or search for your firewall using credentials if you have too and viola. You're in!!

7 de 10

Ins!I!alliitimn Wllo»d Com~lld

Tile !M4atIMl V!lfMrd ~~Iebed ~ooessFuJl~ •.

~,"mch I~ Be sure t. re'IMse n~

~t~

WI[nillow~ Se~r System

1;1201J!ll.~~ lMi=~lln~rp!!lfii~i:Ii!. JIInl ffgMI!i ~$:S9""1!d!.

Remote Administration of ISA Server 2004

I .. ~ _.

II· ~fk

Li\aI,l._~pZJ)!. ~~

- -- -

1 ............. I·'''l

'5iBEI !:hi fI:np.aI.-,.:::L; ...-..:~ EiImIili!I' IV IE!!:'!I Ij'!!I

~ [Iijii!~.w .... ·INt~.

~ota}Il!:F~ ~

I'"' ~'tCni1~ LIM u....:ho&b.

8 de 10

!G~tq '~ .. ~I;!"

·~============================================d

Remote Administration of ISA Server 2004

_ ~ ~~ Soo!;"-'J;y,!\ifldI,Aij~ EI D ~5A

!~"1'Io;i

lfiflWol!!l~

W~ll!iw~ It~;hr~k!;,~ .8 )f> oCM"~~

No!:tWCf~ ~,Cadi!l oQ~

. G!nef:.JI

D

,(3el:i~ing Startedl with ,:nEJ.!!\. S'eNer" 2004

~I~_;;I;~ ~-Ql;iCIi; '"'" 'tW' ~ Sc!vc-r ~ ¥d j;1'~t"""~~, h ~rclv.vlq;~' ,~tr4fk te; fI6w~l!fIIlth!sL

lI)e(lne' "hlill, ~!i:A Serw!j N:l!'bwllrtk [;OOi(l9JF.Iltloo

~ olI ~~ 1MIi~ ~ ti) iJ'o!'WI'yw' l1ili'§!!n"'\'fi' l'!eIi~k~ n ~ iWd!!dw ~.I~ ~~ ~Ii,l;l ~yiW!.f~' rW!;Jo If~ ~ Y!N!" :iSG,'~ ~1IoQ'1q;.

''I1iew IIiI1i!I [i'l1!'Il,tll! Re-wa41 P.iJUli~ R!JIIe:s:

O"MIiil"n,b; dcf~ I!K!!Y i~ ~ ~ ~,I',!KOtIij tJl! ~f1Ii:It '!'la, ~* Ci·~ ~ '~~ ~ .-:I1Wd!J:sj~ wn~:w;!I~'s:Id!! Y"D ~*~.

lIIi!!fuJe' IHIDw ~:3A !lii!!t'\!'eI' CadIe:5, 'i'iI~ IlInltf'flt l~o!!~w..~.pJ~N.,*WCIb~f~by~_rq..,~~~~ ~ ttl ~m ~ ,nil hiIw elbm1 oitJietH iii ~ ~,ri~.

iL:on1imtIll1" ViIiN Acce:5. ~

I~ ~ ~ ~ ~~~'¥F~II"W~~ ~(\R'ij ~ r~~~ ,~~ til! ~ ,[r(~lIIIII ~

,Monit!1lf 'I'!IIlIIr 1M Sef!f.f'r Ni!it'WGrlb

USe'I~ ~,INI_!Dr~ detZ~:roor"~) iD!~"[~, Def'n!! ae.t:l -I!ifii:Ii'~_f~.

Easy as pie!!!!

For more information about Windows Terminal Services, please visit MSTerminaIServices.orq.

About Greg Mulholland

Greg is an ITlNetwork specialist working in his home town of Melbourne, Australia. For the last few years he has been involved in the design, testing and implemtation of Windows networks. His area of speciality these days is implementing effective ISA server solutions for both SME's and public and private schools and colleges.

Latest articles by Greg Mulholland

• Configuring URL and domain packet prioritization with Diffserv

• Creating URL and Domain Deny Lists using ISA Server 2004

• Preventing P2P and Instant Messaging programs from hijacking your network with ISA 2004 Firewalls

• Configuring Alerting in ISA Server 2004

• How to publish VNC behind an ISA Server

Receive all the latest articles by email!

9 de 10

Remote Administration of ISA Server 2004

Receive Real-Time & Monthly ISAserver.org article updates in your mailbox. Enter your email below! Click for Real-Time sample & Monthly sample

Enter Email

o

Become an ISAserver.org member!

Discuss your ISA Server issues with thousands of other ISA Server experts. Click here to join!

About Us : Email us : Product Submission Form : Advertising Information ISAserver.org is in no way affiliated with Microsoft Corp. *Links are sponsored by advertisers.

Copyright © 2011 TechGenix Ltd. All rights reserved. Please read our Privaey Policy and Terms & Conditions.

10 de 10