|
Rimuovere ISA Server 2000 da un SBS 2003 |
|
|
|
|
Può capitare in una configurazione di rete SBS Microsoft di voler rimuover ISA Server dalla struttura per sostituirlo con un Firewall Hardware. Ecco una utile guida al caso: http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2005-10/msg00906.html
Actually ISA is an advanced firewall and also a proxy server. It can do what most hardware firewall does to prevent malicious attacks. It also provides application level protection to the network and proxy service to your web clients and it can cache web content to accelerate the web site access. It does not conflict with your hardware firewall. Therefore I do not suggest you uninstall the ISA Server, instead, you can configure your network as the following: Clients --- SBS/ISA --- Hardware Firewall --- Internet This network diagram is widely used in most cased. If you prefer uninstalling ISA, you can just follow the steps below (The steps are for ISA 2000, but also feasible in ISA 2004): 1. First uninstall Firewall Client from all workstations. Empty the web proxy settings from IE. You'd better find a time when all workstations and laptops are connected to the network to remove Firewall Client from them. 2. Then uninstall ISA in Control Panel on the SBS server. If you fail to do that, you can remove it by running the rmisa.exe tool in the SBS 2003 ISA CD's ISA2000\isa\i386 folder. 3. Re-run CEICW. If you have two network adapters, Windows Server 2003 Basic Firewall can be enabled and you should still see the Firewall page on CEICW. You can either enable or disable it. 4. For those laptops which may not be on the network when you uninstall ISA, you can try to uninstall the ISA Firewall Client from Add/Remove Programs. Try to finish the wizard no matter what errors you see. Then we can manually remove the Firewall Client: A. Open Registry Editor (regedt32) and remove the following keys (you may not be able to locate all of them): - Remove 8A95A7C8EBA9A954A939802C184A2A46 from HKEY_CLASSES_ROOT\Installer\Features\. - Remove 8A95A7C8EBA9A954A939802C184A2A46 from HKEY_CLASSES_ROOT\Installer\Products\ - Remove Firewall Client from HKEY_CURRENT_USER\Software\Microsoft\. - Remove Firewall Client from HKEY_LOCAL_MACHINE\Software\Microsoft\. - Remove Firewall Client from HKEY_USERS\.DEFAULT\Software\Microsoft\. - Remove 8A95A7C8EBA9A954A939802C184A2A46 from HKEY_LOCAL_MACHINE\Software\CLASSES\Installer\Features\. - Remove 8A95A7C8EBA9A954A939802C184A2A46 from HKEY_LOCAL_MACHINE\Software\CLASSES\Installer\Products\. - Remove 945E895D0A5100149B4B8D6E01A3DA26 from HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer \Components\. - Remove 8A95A7C8EBA9A954A939802C184A2A46 from HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Featu res \. - Remove the C:\Program Files\Microsoft Firewall Client value from HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer \Folders\. - Remove {8C7A59A8-9ABE-459A-9A93-08C281A4A264} from HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall . B. Delete the following folders and files: - C:\Program Files\Microsoft Firewall Client - Find and delete Wspcpl32.cpl If you plan to use 1 NIC on the server, you have to put more efforts in configuring your network and this requires more downtime so I don't recommend you do that. With only 1 NIC on the server, you have to connect both the server and clients to the hardware firewall. This may involve changing the whole network's subnet. Hope the above information helps. Please feel free to let me know if there is anything I can do for you. Have a nice day! :) Best Regards Edward Tian(MSFT) Microsoft CSS Online Newsgroup Support Get Secure! - www.microsoft.com/security
|