Home Setting Network (II) 3. Managing IP Security 3.2 Enabling IPSec for an Entire Domain

3.2 Enabling IPSec for an Entire Domain

Marţi, 18 August 2009 16:33 Eugen Morar
Email
In this video i will enable IPSec for an entire domain.


 
In this lab, you will enable ipsec for an entire domain, rather than just for the local computer.
  1. Click Start > Run, type MMC, and click OK. An empty MMC console window appears.
  2. Select File > Add/Remove Snap-In. When the Add/Remove Snap-In dialog box appears, click the Add button.
  3. In the Add Standalone Snap-In dialog box, select Group Policy Object Editor and click the Add button.
  4. The Select Group Policy Object dialog box appears. Click the Browse button to bring up the Browse For A Group Policy Object dialog box.
  5. Select Default Domain Policy and click the OK button.
  6. Click the Finish button in the Select Group Policy Object dialog box.
  7. Click the Close button in the Add Standalone Snap-In dialog box and then click the OK button in the Add/Remove Snap-In dialog box.
  8. Expand Default Domain Policy > Computer Configuration > Windows Settings > Security Settings > IP Security Policies on Default Domain Name.
  9. The right side of the MMC window lists the available policies, including the three predefined policies.
  10. Right-click the Server (Request Security) policy and select the Assign command. Notice that the Policy Assigned column for that policy now reads