Comments on: How Do I Edit the Domain Controllers Computer Set? http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/ Written by Dr Thomas W Shinder, consultant to Microsoft, HP and many Fortune 500 companies on ISA firewall and Web proxy deployments this blog is where administrators get information about ISA Server Universal Threat Management firewalls. Topics include how to manage, deploy, and troubleshoot ISA Server as a network firewall, Web proxy/Web cache, remote access VPN server and VPN gateway to provide a high level of network security for all corporate computers. Tue, 6 Jan 2009 21:15:38 +0000 http://wordpress.org/?v=MU by: Alan http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-156605 Tue, 05 Feb 2008 10:25:36 +0000 http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-156605 Try this, it works on ISA 2004 Array: ADSIEDIT Connect to: Name: Configuration Connection Point select "Select or type a DN or Naming Context: CN=FPCConfiguration (LEAVE CAPITAL LETTERS ABOVE othewise doesn't work) Advanced: set PORT to 2171 Click OK then go to the added connection and navigate to: -->Configuration (server name) -->CN=FPCConfiguration -->CN=Array-Root -->CN=Arrays -->CN=GUID -->Rule Elements -->ComputerSets -->CN={320FD4A2-F152-4510......} Right click on this GUID Select attribute "msFPCPredefined" and set to "FALSE" Now open ISA console and you will be able to set Domain Controllers objects Try this, it works on ISA 2004 Array:

ADSIEDIT

Connect to:

Name: Configuration
Connection Point select “Select or type a DN or Naming Context: CN=FPCConfiguration (LEAVE CAPITAL LETTERS ABOVE othewise doesn’t work)
Advanced: set PORT to 2171
Click OK then go to the added connection and navigate to:
–>Configuration (server name)
–>CN=FPCConfiguration
–>CN=Array-Root
–>CN=Arrays
–>CN=GUID
–>Rule Elements
–>ComputerSets
–>CN={320FD4A2-F152-4510……}
Right click on this GUID
Select attribute “msFPCPredefined” and set to “FALSE”

Now open ISA console and you will be able to set Domain Controllers objects

]]> by: Jim Harrison http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-104116 Tue, 19 Jun 2007 15:09:41 +0000 http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-104116 This is a bad idea and takes you straight into unsupported territory. Unless you're directed by PSS (directly or via KB), you should never directly modify ISA storage. THe correct answer is to create another CS that you can actually manage and manage your DC list there. This is a bad idea and takes you straight into unsupported territory.
Unless you’re directed by PSS (directly or via KB), you should never directly modify ISA storage.
THe correct answer is to create another CS that you can actually manage and manage your DC list there.

]]> by: alanmara http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-95922 Wed, 16 May 2007 10:21:16 +0000 http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-95922 ISA 2004 Enterprise Go to Start/All Programs/ADAM/ADAM ADSI Edit Connect to: connection name: connection Server name: localhost Port: 2171 Connect to the following node Distinguished name (DN) or naming context: CN=FPCConfiguration Click OK Expand "CN=FPCConfiguration/CN=Array-Root/CN=Arrays/CN={GUIARRAY}/CN=RuleElements/CN=ComputerSets Locate the GUI that refers to your DCs click right-mouse on GUI and then Properties in the Attribute Editor window locate the object "msFPCPredefined" and set to TRUE ISA 2004 Enterprise
Go to Start/All Programs/ADAM/ADAM ADSI Edit

Connect to:
connection name: connection
Server name: localhost
Port: 2171
Connect to the following node
Distinguished name (DN) or naming context: CN=FPCConfiguration

Click OK

Expand “CN=FPCConfiguration/CN=Array-Root/CN=Arrays/CN={GUIARRAY}/CN=RuleElements/CN=ComputerSets

Locate the GUI that refers to your DCs

click right-mouse on GUI and then Properties

in the Attribute Editor window locate the object “msFPCPredefined” and set to TRUE

]]> by: Thomas Shinder http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-93367 Thu, 03 May 2007 17:39:21 +0000 http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-93367 Hi Jeroen, Thanks! That's great info. Tom Hi Jeroen,

Thanks! That’s great info.

Tom

]]> by: Jeroen Landheer http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-93120 Tue, 01 May 2007 23:06:24 +0000 http://blogs.isaserver.org/shinder/2006/07/09/how-do-i-edit-the-domain-controllers-computer-set/#comment-93120 Thanks for the hint :) In the Enterprise edition, this can be achieved using ADSI Edit on the configuration storage server. Connect to the CN=FPC2 partition on :2171 and go to Array-root/CN=/RuleElements/CN=Computersets/CN= {Check the msFPCName attribute's value to find the domain controllers property} and edit the msFPCPredefined attribute to set this from either "Not defined" or "TRUE" to "FALSE". Restart the ISA Management console before making any changes, or you might get the message: "Changes cannot be made to the predefined item". Best regards, Jeroen. Thanks for the hint :)

In the Enterprise edition, this can be achieved using ADSI Edit on the configuration storage server.

Connect to the CN=FPC2 partition on :2171 and go to Array-root/CN=/RuleElements/CN=Computersets/CN= {Check the msFPCName attribute’s value to find the domain controllers property} and edit the msFPCPredefined attribute to set this from either “Not defined” or “TRUE” to “FALSE”.

Restart the ISA Management console before making any changes, or you might get the message: “Changes cannot be made to the predefined item”.

Best regards,

Jeroen.

]]>