Microsoft
Software
Hardware
Network
Question : enabling AD replication via IPsec on existing domain controllers
I have an existing AD domain with numerous sites. Currently, we are allowing AD replication through the firewalls with the "swiss cheese" method, allowing RPC, etc. To trim this down, we would like to start using IPsec encapsulation for AD replication between DCs. I'm currently following this article:
http://technet.microsoft.c
om/en-us/l
ibrary/bb7
27063.aspx
There is one discrepancy in that article that is troubling me, however. It says that I need to go to:
Start | Programs | Administrative Tools | Local Security Policy
However, this is not available on a domain controller. I only have 'Domain Security Policy' and 'Domain Controller Security Policy'. If I start defining ipsec policies using the 'Domain Controller Security Policy' link instead of 'Local Security Policy', won't those policies get replicated to all DCs? Will that be an issue?
Ideally, I'd like to enable ipsec on certain DCs as a test, and roll it out to other DCs as I verify it's working. I don't want to do a global ipsec configuration and activate it on every DC simultaneously.
Answer : enabling AD replication via IPsec on existing domain controllers
Thanks for your input, I agree that applying ipsec settings via group policy is not a good idea, as you stated. I would definitely apply settings to 2 domain controllers via secpol.msc and ensure that the configuration is filtered via ip address
Posted via EE Mobile
Random Solutions
copy a defined user profile when user logs on domain for first time. Giving identical initial profile at logon. Each user can then modify this profile as required. over time keeping settings
Calculated variable on server...
how can i create window service in C# using InstallUtil.exe ??
Forward meeting requests to another mailbox
Remote Desktop Services on Windows 2008 Foundation Server
Firewall & Windows Security Center
Validation of viewstate MAC failed? How I fix it?
printmig.exe aborting early
Repair of Win XP
Shared calendar does not show appointments until refreshed