118 DOMINION SX I NSTALLATION AND O PERATIONS MANUALH. Enable the Routing and Remote Access ServiceIf this server is a member of a Windows 2000 Active Directory domain and you are not a domainadministrator, your domain administrator must add the computer account of this server to the RAS andIAS Servers security group in the domain of which this server is a member. The domain administrator canadd the computer account to the RAS and IAS Servers security group by using Active Directory Usersand Computers or with the netsh ras add registered server command.1. Open Routing and Remote Access.2. By default, the local computer is listed as a server.3. To add another server, in the console tree, right-click on Server Status and select Add Server from thedrop-down menu.4. In the Add Server dialog box, click the applicable option, and then click on the [OK] button.5. If the server you want is already added, enable the server.a. In the console tree, right-click the server you want to enable and select Configure and EnableRouting and Remote Access from the drop-down menu.b. Follow the instructions in the Routing and Remote Access wizard.Note: To open Routing and Remote Access, select Start→ Programs→ Administrative Tools→ Routingand Remote Access.I. Use RADIUS Authentication1. Open Routing and Remote Access.2. Right-click on the server name for which you want to configure RADIUS authentication and selectProperties from the drop-down menu.3. Click on the Security tab and under Authentication Provider, select RADIUS Authentication.4. Click on the [Apply] button.5. Click on the [OK] button.J. Enable the IAS Server to Read User Objects in Active Directory1. Log on to the IAS server with an account that has domain administrator credentials.2. Open Internet Authentication Service.3. Right-click on Internet Authentication Service and select Register Service in Active Directory fromthe drop-down menu.4. When the Register Internet Authentication Service in Active Directory dialog box appears, click on the[OK] button.Notes:→ To open IAS, click Start, select Programs, select Administrative Tools, and click on InternetAuthentication Service.→ This procedure adds the IAS server only to the default domain. To add the IAS server to other domains,you must add the servers manually. To do this:- Log onto the server using domain administrator credentials.- Select Start→ Programs→ Administrative Tools→ Active Directory Users and Computers.- In the Console Tree, select Users.- In the Details pane, right-click on RAS and IAS Servers and select Properties from the drop-down menu.- In the RAS and IAS Servers Properties dialog box, click on the Members tab and add each of the IASservers.→ After you register the service in Active Directory, it is a good idea to verify the security settings.
