PC Review


Reply
Thread Tools Rate Thread

Accessing Standalone Wink3 Server from XP Workstations

 
 
CHANGING FAIL OVER CLUSTER TO NLB
Guest
Posts: n/a
 
      9th May 2008
Hello:

Situation:
-----------
--All standalone servers and no Active Directory.
--Win2k3 server. Has a test web page.
--Applied IPSec policy on the local Win2k server first by creating an ip
filter limiting access to "Require Security" for all the XP workstations
coming from a certain network.
--There is a seperate standalone sub-CA server which issues certificates.
--The Win2k3 Server which has a test web page and which has a "Require
Security" policy implemented has a Certificate (IPSec) installed on the
Computer Account.
--XP client workstation which has NO Certificate installed tries to access
the test page from the subnet mentioned in the IP filter and which has
Require Security option and it can access that page successfully without any
problem.

My questions are as follows:
--------------------------------

1. Do we really need to implement IPSec policy at the client level as well
which means that we need to distribute or issue Certificates (IPSec) with
"Require Security" option at the client side as well?

2. Is there any way without having to implement IPSec policy at the client
workstation to completely block access to the above mentioned Win2k3 server
where IPSec policy is implemented (web page or accessing file share etc)?

I will certainly appreciate your input on this. Thanks.

Victor

 
Reply With Quote
 
 
 
 
Douglas J. Steele
Guest
Posts: n/a
 
      9th May 2008
Sorry, this newsgroup is for questions about security in Access, the
database product that's part of Office Professional.

You'd be best off reposting your question to a more appropriate newsgroup.

--
Doug Steele, Microsoft Access MVP
http://I.Am/DougSteele
(no private e-mails, please)


"CHANGING FAIL OVER CLUSTER TO NLB"
<(E-Mail Removed)> wrote in message
news:90281F0E-F426-4E52-9970-(E-Mail Removed)...
> Hello:
>
> Situation:
> -----------
> --All standalone servers and no Active Directory.
> --Win2k3 server. Has a test web page.
> --Applied IPSec policy on the local Win2k server first by creating an ip
> filter limiting access to "Require Security" for all the XP workstations
> coming from a certain network.
> --There is a seperate standalone sub-CA server which issues certificates.
> --The Win2k3 Server which has a test web page and which has a "Require
> Security" policy implemented has a Certificate (IPSec) installed on the
> Computer Account.
> --XP client workstation which has NO Certificate installed tries to access
> the test page from the subnet mentioned in the IP filter and which has
> Require Security option and it can access that page successfully without
> any
> problem.
>
> My questions are as follows:
> --------------------------------
>
> 1. Do we really need to implement IPSec policy at the client level as well
> which means that we need to distribute or issue Certificates (IPSec) with
> "Require Security" option at the client side as well?
>
> 2. Is there any way without having to implement IPSec policy at the client
> workstation to completely block access to the above mentioned Win2k3
> server
> where IPSec policy is implemented (web page or accessing file share etc)?
>
> I will certainly appreciate your input on this. Thanks.
>
> Victor
>



 
Reply With Quote
 
CHANGING FAIL OVER CLUSTER TO NLB
Guest
Posts: n/a
 
      10th May 2008
Oops.....thanks for the pointer.

Victor

"Douglas J. Steele" wrote:

> Sorry, this newsgroup is for questions about security in Access, the
> database product that's part of Office Professional.
>
> You'd be best off reposting your question to a more appropriate newsgroup.
>
> --
> Doug Steele, Microsoft Access MVP
> http://I.Am/DougSteele
> (no private e-mails, please)
>
>
> "CHANGING FAIL OVER CLUSTER TO NLB"
> <(E-Mail Removed)> wrote in message
> news:90281F0E-F426-4E52-9970-(E-Mail Removed)...
> > Hello:
> >
> > Situation:
> > -----------
> > --All standalone servers and no Active Directory.
> > --Win2k3 server. Has a test web page.
> > --Applied IPSec policy on the local Win2k server first by creating an ip
> > filter limiting access to "Require Security" for all the XP workstations
> > coming from a certain network.
> > --There is a seperate standalone sub-CA server which issues certificates.
> > --The Win2k3 Server which has a test web page and which has a "Require
> > Security" policy implemented has a Certificate (IPSec) installed on the
> > Computer Account.
> > --XP client workstation which has NO Certificate installed tries to access
> > the test page from the subnet mentioned in the IP filter and which has
> > Require Security option and it can access that page successfully without
> > any
> > problem.
> >
> > My questions are as follows:
> > --------------------------------
> >
> > 1. Do we really need to implement IPSec policy at the client level as well
> > which means that we need to distribute or issue Certificates (IPSec) with
> > "Require Security" option at the client side as well?
> >
> > 2. Is there any way without having to implement IPSec policy at the client
> > workstation to completely block access to the above mentioned Win2k3
> > server
> > where IPSec policy is implemented (web page or accessing file share etc)?
> >
> > I will certainly appreciate your input on this. Thanks.
> >
> > Victor
> >

>
>
>

 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Standalone workstations & local policies. Apply & remove w/ script =?Utf-8?B?QnJpYW5fQ2hyaXN0aWU=?= Windows XP Security 0 9th May 2007 06:22 PM
Windows XP is not accessing the Win98 Workstations =?Utf-8?B?TWVlcg==?= Windows XP Accessibility 1 20th Apr 2005 07:45 PM
Copying users from one standalone member server to another standalone server Shiva Microsoft Windows 2000 Security 1 29th Aug 2003 03:48 AM
Accessing pst from server share to multiple workstations Help me Microsoft Outlook Interoperability 2 19th Jul 2003 04:15 PM
XP Pro Workstations hanging when accessing files on Win2K Server Jonathan Windows XP Networking 1 18th Jul 2003 08:43 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 07:46 PM.