Logo

20/05/2012

Supporto OnLine

Supporto Tecnico OnLine

Prima di accedere contattare i nostri tecnici per attivare la sessione

Rimuovere ISA Server 2000 da un SBS 2003 PDF Stampa E-mail

Può capitare in una configurazione di rete SBS Microsoft di voler rimuover ISA Server dalla struttura per sostituirlo con un Firewall Hardware.

 

Ecco una utile guida al caso:

http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2005-10/msg00906.html

 

 

 

 

Actually ISA is an advanced firewall and also a proxy server. It can do
what most hardware firewall does to prevent malicious attacks. It also
provides application level protection to the network and proxy service to
your web clients and it can cache web content to accelerate the web site
access. It does not conflict with your hardware firewall. Therefore I do
not suggest you uninstall the ISA Server, instead, you can configure your
network as the following:

Clients --- SBS/ISA --- Hardware Firewall --- Internet

This network diagram is widely used in most cased.
If you prefer uninstalling ISA, you can just follow the steps below (The
steps are for ISA 2000, but also feasible in ISA 2004):

1. First uninstall Firewall Client from all workstations. Empty the web
proxy settings from IE. You'd better find a time when all workstations and
laptops are connected to the network to remove Firewall Client from them.

2. Then uninstall ISA in Control Panel on the SBS server. If you fail to do
that, you can remove it by running the rmisa.exe tool in the SBS 2003 ISA
CD's ISA2000\isa\i386 folder.

3. Re-run CEICW. If you have two network adapters, Windows Server 2003
Basic Firewall can be enabled and you should still see the Firewall page on
CEICW. You can either enable or disable it.

4. For those laptops which may not be on the network when you uninstall
ISA, you can try to uninstall the ISA Firewall Client from Add/Remove
Programs. Try to finish the wizard no matter what errors you see. Then we
can manually remove the Firewall Client:

A. Open Registry Editor (regedt32) and remove the following keys (you may
not be able to locate all of them):

- Remove 8A95A7C8EBA9A954A939802C184A2A46 from
HKEY_CLASSES_ROOT\Installer\Features\.

- Remove 8A95A7C8EBA9A954A939802C184A2A46 from
HKEY_CLASSES_ROOT\Installer\Products\

- Remove Firewall Client from HKEY_CURRENT_USER\Software\Microsoft\.

- Remove Firewall Client from HKEY_LOCAL_MACHINE\Software\Microsoft\.

- Remove Firewall Client from HKEY_USERS\.DEFAULT\Software\Microsoft\.

- Remove 8A95A7C8EBA9A954A939802C184A2A46 from
HKEY_LOCAL_MACHINE\Software\CLASSES\Installer\Features\.

- Remove 8A95A7C8EBA9A954A939802C184A2A46 from
HKEY_LOCAL_MACHINE\Software\CLASSES\Installer\Products\.

- Remove 945E895D0A5100149B4B8D6E01A3DA26 from
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer
\Components\.

- Remove 8A95A7C8EBA9A954A939802C184A2A46 from
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Featu
res
\.

- Remove the C:\Program Files\Microsoft Firewall Client value from
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer
\Folders\.

- Remove {8C7A59A8-9ABE-459A-9A93-08C281A4A264} from
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall .

B. Delete the following folders and files:

- C:\Program Files\Microsoft Firewall Client

- Find and delete Wspcpl32.cpl

If you plan to use 1 NIC on the server, you have to put more efforts in
configuring your network and this requires more downtime so I don't
recommend you do that. With only 1 NIC on the server, you have to connect
both the server and clients to the hardware firewall. This may involve
changing the whole network's subnet.

Hope the above information helps. Please feel free to let me know if there
is anything I can do for you.

Have a nice day! :)

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security