It is really not important who eventually takes over administrative control of an ISA
server, but what is important is that the important characteristics of the ISA server itself
are taken into account. An ISA server acts and performs in a profoundly different way
than other servers, particularly other Microsoft servers.
Exploring ISA Administrator Roles
ISA Server 2006 Standard edition comes installed with three predefined Administrator
groups, depending on the type of administration that needs to be performed:
. ISA Server Full Administrator??”An ISA Server Full Administrator can perform all
ISA Admin tasks, including all firewall, VPN, and content-caching configuration.
. ISA Server Monitoring Auditor??”The ISA Server Monitoring Auditor role can only
view and acknowledge alerts, services, and sessions, and cannot configure any of the
ISA settings.
. ISA Server Auditor??”The ISA Server Auditor role allows for configuration of specific
alerts, viewing log information and creating reports and definitions, and stopping
and restarting individual sessions and services.
Each one of these roles can be delegated to individual users or, preferably, to groups of
users, through use of ISA Server??™s Assign Administrative Roles wizard.
Pages:
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686