Adding new windows 2000 server machine to domain

[Jan]

Hi

I have a small network with one server acting as a domain controller. I have
added another machine running windows 2000 server that has isa 2004
installed (but not working). I have added this new machine to the domain
by -> 'configure your server' screen -> network-> network identification->
member of -> domain and then typing my domain name.

Do I have to do anything else?

When I log onto the new machine using an admin account I notice I get an
event ID 54, that says 'windows time service was not able to find a domain
controller', just before I get event id 7001 which says 'microsoft firewall
service depends on the ms ISA server control that failed to start because of
error %%0.

I was wondering whether the isa error was linked to the machine being unable
to find a domain controller for time service?

Many thanks for any help given
J

windows 2000 server + all updates
ISA 2004 server standard
computer shows as: x86 family 6 model 5 Stepping 2
AT/At compatable
130,548kb ram.

 

[Jan]

I have just realised that in the Active Directory, it has various options
regarding configuring the isa server as an additional domain controller,
child domain, domain tree or forest. Should i be configuring the isa
server as one of these, and if so which?
Many thanks

 

[Paul Williams [MVP]]

Don't configure ISA as a domain controller. Keep it as a member server if
your intention is to use as a perimeter firewall that utilises your domain
groups; otherwise use as a standalone server (I won't go into the other
options here).

We'll have to come back to the ISA errors; lets sort the DNS side of things
first.

Disable ISA (stop all services). Then open a command prompt and type:
nslookup -type=srv _ldap._tcp.dc._msdcs.domain-name.com

Where domain-name.com is your domain name.

Is that successful?


If so, all you need to do is enable ISA and configure it. For this I
recommend the guides on www.isaserver.org. You might also find that you'll
get better answers in the ISA Server newsgroups.