Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

IAS : Migration and requirement

Posted on 2007-12-01
3
2,184 Views
Last Modified: 2013-12-04
I am upgrading our Active Directory from Windows 2000 to Windows 2003 R2. There is a 2000 DC with IAS-RADIUS server running doing authentication for CISCO WAP devices. I will be demoting that server and I would like move that IAS service to a Windows 2003 server. Questions:

1- Do you know the steps to migrate IAS settings from 2000 to a 2003 server? I already found the steps from 2000 to 2000 bu there is a disclaimer about not working when moving to a 2003 server. Here: http://www.webservertalk.com/archive123-2004-10-357884.html

2- Is it required for IAS to run on a Domain Controller and not just a member server? The reason I ask is due to this KB Article:http://support.microsoft.com/kb/317588

Thanks

0
Comment
Question by:JohnRamz
  • 2
3 Comments
 
LVL 37

Accepted Solution

by:
bbao earned 500 total points
ID: 20389525
1. as per the following MS official document, "the configuration of IAS servers running on products in the Windows 2000 server family can be imported into products in the Windows Server 2003 family with set config. The reverse, however, is not possible."

Netsh commands for AAAA
http://technet2.microsoft.com/WindowsServer/en/Library/9ffd261c-62e4-4f41-aa35-2790bd2534771033.mspx

2. you may run IAS on a member server. actually, installing an IAS on a domain controller is a bit unusual. that's probably why MS published two KB articles regarding "how to configure a Primary/Secondary Internet Authentication Service Server on a Domain Controller."

hope it helps,
bbao
0
 
LVL 37

Expert Comment

by:bbao
ID: 20389593
basically, where to put an IAS depends on your security architecture. you have to find a tradeoff between security and performance. for example, installing IAS on DC avoids the traffic between IAS and DC, but it allows IAS clients to "touch" the DC where stores the most sensitive credentials of an organization.

hope it helps,
bbao
0
 

Author Comment

by:JohnRamz
ID: 20389921
I appreciate your answer, I believe that would do it. I will test it next week and rate your answer

Thanks

0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question