[Update 16 Aug 2004] I've posted some sample TSWeb HTM file that handles different ports too, and steps for how to get it working* with ISA 2004 (or other Port Address Translation-capable firewalls) in this post: Publishing RDP (Terminal Servers, XP Remote...

My last post on TSWeb (aka TSAC or Remote Desktop Web Connection) continues to be one of my most-hit blogs, so I spent a little time working with the TSWeb default connection page to try to simplify some of the bits that people were asking about. The...

If you think you're experiencing deja vu, it's because this was also covered in Publishing RDP Servers with TSWeb and ISA 2004 , but I thought I'd do some housekeeping and make a separate post on the pre-fiddled TSWeb connection pages. Short version ...

What can we say about MaxUserPort that hasn't already been said? Not a lot, it would seem. He's a beautiful dancer, perhaps? Ahh, such gentle humour, and nary a kitten drowned anywhere. But TCP port shenanigans are fairly frequently misunderstood,...

Hit this earlier while working with someone else on a Kerberos delegation problem. All the SPNs looked right and were registered against the right accounts; all the App Pools were Network Service; from what I'd been told, everything should have been working...

After migrating to a new user profile (easiest way to make a clean start and work out what I actually need on my desktop), I remembered one of my pet annoyances: MSN Messenger (and/or Windows Messenger) sounds like an ice cream van when it's installed...

In my earlier post on Xbox 2 rumours , I mentioned that I'd like a DVI adapter for the Xbox 2. (I wasn't able to find one for Xbox 1 yet, either) But I have a problem now with my Xbox 1, which is that since I picked up an Apple Cinema Display , I can...

Short version: ISA 2000 isn't out-of-the-box able to change published ports when doing Server Publishing. (I think Application Filters can be written to do this, but I'm not totally sure). ISA 2004 can do this. Long version: RRAS has had the...

Remote Web Workplace is (in my humble opinion) The Ninja Feature of SBS2003. In fact, it gets the inaugural EBTDF Ninja Feature award for being so cool. Thanks to Susan Bradley for putting me on to it . Let me say right now - if you're using...

How you pick NTLM from Kerberos when all you have is a trace. NTLM: 2 round trips to authenticate, short Negotiate blobs on requests. Kerberos: single round trip to authenticate, huge Negotiate blob on the request....

The one where I try to boil Kerb down to three simple rules, and then decide that's probably impossible without sub-rules and perhaps a nine article series, and then get bored and go home.

...

Dr Tom calls out an excellent method of bouncing users from an "entry" URL to the right one (his example is bouncing someone from mail.example.com to mail.example.com/exchange, but it should work for others too). http://blogs.isaserver.org/shinder/2006...

This week, a pointer to a solution to a problem I occasionally hit. Windows Vista (and by extension Windows Server 2008, I assume) utilizes a new EVTX log format for event log exports. It's XML-based, natch. Problem: Everyone's Favourite Log Digestion...

PasteOff Strange New Disturbance I've been testing PjPic , and it addresses many deficiencies of PasteOff (multi-profile!). If you like PasteOff, you might like PjPic more. Or as well! Fiddling: PasteOff Image Saving Thing As I mentioned in...

Release Candidate 2 for Windows Server 2003 SP1 is available to test from microsoft.com, which means RTM can't be that far away! A new feature in SP1 (at least, present in the RC2 build of SP1) that's been causing some confusion is RDP over SSL - a new...

A quick note that's becoming something of an internal FAQ - the information below is from MSDN . Detecting Internet Explorer in SP2 You can use window.navigator.userAgent to detect if the browser connecting to your site is Internet Explorer in SP2. var...

Various aspects of TS Licensing are often misunderstood, so I set myself the goal of explaining it relatively clearly in under 90 words.   I cheated by using a picture, which is reputedly worth a thousand words, though I think that mainly applies...

Quite often, we're faced with a situation where an application has its own Web Proxy client mechanism, and that mechanism has various issues, like: It doesn't support NTLM authentication, and only NTLM is enabled on the ISA Server It doesn't...

Usability strides in ISA 2004 aside, ISA Server is a powerful product that's still quite easy to misconfigure. With great flexibility comes great potential complexity... Most of the time, there's a straightforward explanation for unintended results...

The Setup My downstairs PC (on the dining room table) is an HP Touchsmart all-in-one Core 2 Duo Intel Integrated Graphics 965-based box, which makes it absolutely abominable for games. Upstairs, my internet connection plugs into my Hyper-V host...

Your One-Stop Shop for the OLCalendar Blogwave Adapter. Usefulness not guaranteed. For now, an all-in-one version history (topmost is newest, natch), but later- who knows? General Notes: PubDate is set to the Start Date of the appointment. I haven't found...

Note: This is a mildly edited dump of my OneNote page on getting RADIUS authentication configured for a standard HTTP connection through ISA Server 2004, with Basic Delegation enabled (so that you authenticate once for ISA's rules, and the same credentials...

It's pronounced "try-stank". I'm Tristan Kington, a Premier Field Engineer covering Security, PKI, Forefront Threat Management Gateway and ISA Server, with some networky stuff thrown in, and IIS. And some development bits. And some random Windows stuff...

Short version: Use an IPSec policy to configure a miniature firewall on each client (Windows 2000 and above) to stop SASSER reboots and buy time to deploy the patch. Long version: The Sasser worm hits hosts on port 445 to infect them and crashes...

Working from the to do list at the original post , and desperately trying to avoid working on my terrible remote desktop switcher, I've updated the pseudo-terrible calendar adapter. Major New Features: Prettier icon, using the BlogWave Dynamic Wave Device...