Lesson 4

Troubleshooting Data Transmission Security

12-43

Exercise 3: Creating a Domain IPSec Policy

In this exercise, you recreate the Web Server Security IPSec policy from the Lesson 3

practice in Active Directory and repeat the RSoP scan.

1. From the MMC console’s File menu, select Add/Remove Snap-in. The Add/

Remove Snap-in dialog box appears.

2. Click Add. The Add Standalone Snap-in dialog box appears.

3. Scroll down the Available Standalone Snap-ins list, select IP Security Policy Man-

agement, and then click Add. The Select Computer Or Domain dialog box

appears.

4. Select The Active Directory Domain Of Which This Computer Is A Member option

button and then click Finish.

5. In the Add Standalone Snap-in dialog box, select Group Policy Object Editor and

then click Add. The Select Group Policy Object page appears.

6. Click Browse. The Browse For A Group Policy Object dialog box appears.

7. In the Domains, OUs And Linked Group Policy Objects list, select the Default

Domain Policy icon and then click OK.

8. Click Finish to close the Select Group Policy Object page.

9. Click Close to close the Add Standalone Snap-in dialog box.

10. The IP Security Policies On Active Directory and the Default Domain Policy

(server01.contoso.com) Policy snap-ins now appear in the Add/Remove Snap-in

dialog box.

11. Click OK to close the Add/Remove Snap-in dialog box. The snap-ins you selected

now appear in the scope pane of the MMC console.

12. Click the IP Security Policies On Active Directory heading in the scope pane. The

three default IPSec policies appear in the details pane.

13. Ensure that you’ve selected the IP Security Policies On Active Directory heading

and then repeat steps 1 through 34 from Exercise 2 in Lesson 3 of this chapter to

create the Web Server Security policy in the Default Domain Policy Group Policy

Object.

14. Expand the Default Domain Policy (server01.contoso.com) Policy heading in the

scope pane. Then expand the Computer Configuration, Windows Settings, and

Security Settings headings and click IP Security Policies On Active Directory (con-

toso.com).

15. In the details pane, click Web Server Security and, from the Action menu, select

Assign.