Configure the Secondary IAS Server on a Different Domain Controller

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To configure the secondary IAS server on a different domain controller, do the following:

  1. On the other domain controller in the same domain, install IAS by using Add/Remove Windows Components. For more information, see "Install IAS" in Help and Support Center for Windows Server 2003.

  2. Configure the secondary IAS server to read the properties of user accounts in the domain by adding the IAS server to the RAS and IAS Servers security group. For more information, see "Enable the IAS server to read user accounts in Active Directory" in Help and Support Center for Windows Server 2003.

  3. If the secondary IAS server authenticates connection attempts for user accounts in other domains, verify that the other domains have a two-way trust with the domain in which the secondary IAS server is a member. Next, configure the secondary IAS server to read the properties of user accounts in other domains by adding the IAS server to the RAS and IAS Servers security group in those domains. For more information, see " Enable the IAS server to read user accounts in Active Directory" in Help and Support Center for Windows Server 2003.

  4. Copy the configuration of the primary IAS server to the secondary IAS server.

For more information about copying IAS configuration, see "Copy the IAS configuration to another server" in Help and Support Center for Windows Server 2003.