Best Practices

• Use the concept of role-based access control to delegate administrative access to an ISA Server and to other network resources.

• Use the Remote Desktop Protocol (RDP) to administer an ISA Server when possible, rather than using the ISA Administrator MMC Console remotely.

• Use the lockdown mode functionality of an ISA Server to protect an ISA Server from attacks and Denial of Service attempts.

• Create groups to correspond with each of the ISA Administrative roles, such as ISA Full Administrator, ISA Basic Monitoring, and ISA Extended Monitoring.