ISA Administrators are defined in different ways, depending on the organization using the product. For smaller environments, the role of the ISA Administrator most often falls upon those individuals already tasked with general user administration and server support. Larger organizations may delegate ISA admin tasks to messaging administrators, security admins, or network admins, depending on the factors surrounding the deployment of ISA itself.
Understanding Who Administers the ISA Environment
The fact that ISA can fit into so many roles is a tribute to the diverse range of function ality that the server possesses. For example, the following roles are affected in one way or another with an ISA Server:
It is really not important who eventually takes over administrative control of an ISA server, but what is important is that the important characteristics of the ISA Server itself are taken into account. An ISA Server acts and performs in a profoundly different way than other servers, particularly other Microsoft Servers.
Exploring ISA Administrator Roles
ISA Server 2004 Standard edition comes installed with three pre-defined Administrator groups, depending on the type of administration that needs to be performed:
Each one of these roles can be delegated to individual users or, preferably, to groups of users, through use of ISA Server's Administrative Delegation wizard. First, however, best practice security precautions and a controllable and auditable access mechanism should be deployed before the wizard is run.