How to use Windows SBS to manage Internet security

How to use Windows SBS to manage Internet security

I use Windows Small Business Server 2003 Standard Edition. I configured two network adapters: one for the local domain and another to connect to an ISP. I use SMTP in Exchange to send email and a pop3 connector to retrieve them. I discovered that any clients in my domain who put IP Server as their gateway can access the Internet. How can I fix this problem and prevent all users from accessing the Internet using SBS server? (Note: I have ISA 2006 to control the Internet in my domain.)

    Requires Free Membership to View

    When you register, you’ll also receive targeted alerts from my team of editorial writers and independent industry experts with the latest news, tips, and advice to help you do your job more efficiently and effectively. Our goal is to keep you informed on the hottest topics and biggest challenges faced by IT professionals today working with desktop management and security technologies.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchEnterpriseDesktop.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseDesktop.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

It sounds like you have a bit of a problem on a couple of fronts:

  1. Your users should not have permissions on their local machines to change network adapter information, including the gateway address.
  2. You have an ISA Server rule problem that's allowing unsanctioned clients access to the Internet.
  3. ISA Server 2006 is not supported on Small Business Server environments.

SBS is meant to be at the edge of your network. It's not meant to sit on your network and collect mail, which is probably where the "hole" allowing clients to access the Internet through the SBS box is residing.

This was first published in November 2007