It is
important to thoroughly review each item to ensure that the server is properly secured.
. Application Experience Lookup Service??”This service, installed with Windows
Server 2003 Service Pack 1, is a new feature that automatically checks applications
for compatibility issues when they are launched. This is an unnecessary service for
an ISA server, and it should normally be disabled.
. Application Installation from Group Policy??”This option should almost always be
disabled on an ISA server because it is not good practice to have applications automatically
installed, whether from Active Directory or any other location.
. Backup (NT or 3rd Party)??”Enabling this option turns on the appropriate services
and ports to allow the ISA server to be backed up with NTBackup or another thirdparty
backup solution. Although backup functionality is a common feature, ISA can
potentially disable this service if the configuration is manually exported to XML files
on a regular basis. For more information on setting up this type of functionality,
refer to Chapter 18, ???Backing Up, Restoring, and Recovering an ISA Server 2006
Environment.
Pages:
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163