I am building a 2 node ac2000 cluster on Win 2003

We just want the cluster to be used to serve our external websites, which do
not at this stage contain any COM+ components, nor (so the dev guys tell me)
do they require MSDTC.

Installing Application center 2000, with the "com + system Application
service " and "DTC" service disabled, I get the error "setup was unable to
verify COM+ components", and of course, the complusverify exe reports
problems.

So, is com+ needed for Ac2000 to function correctly?

Also, given that the cluster is a bastion host (in our DMZ), I have been
using the "Windows server 2003 Security guide" as a reference for locking
down the machine as much as possible.

Can you advise which services I MUST have started (or at least have set to
manual rather than disabled) for AC2000 to fuction correctly??.
I am especially wondering about the following:

RPC
Server
Workstation
TCP/IP Netbios helper

(or anything else that I should not disable?)

Thanks for your help
Cheers!
Nick

[ Post a follow-up to this message ]

Yes com+ is required.  See the following article

328499 INFO: Considerations for Improved Security in Application Center 2000
http://support.microsoft.com/?id=328499

I would not go locking down the server since I'm pretty sure that security
guide was not written with Application Center in mind and it will probably
break things.
Application Center SP2 is pretty much as secure as possible already.

Thank You

George Cheng

Microsoft Application Center & Index Server Support

Note: This article has no warranties implicit or explicit.
All the content is given on the "as is" basis and the user
takes full responsibility for its use and assumption.
Microsoft Corporation Copyright 2004
All Rights Reserved

--------------------
Thread-Topic: Required components??.. Please help!
thread-index: AcSLOnM912UR1wtKR3GeyO5P7bEhaA==
X-WBNR-Posting-Host: 165.228.129.12
From: "examnotes" <anonymous@nospam.com>
Subject: Required components??.. Please help!
Date: Thu, 26 Aug 2004 00:01:03 -0700
Lines: 31
Message-ID: <28EF9612-3C13-4FFE-B5E0-F14295C4C240@microsoft.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.applicationcenter.setup
NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
Xref: cpmsftngxa10.phx.gbl microsoft.public.applicationcenter.setup:4621
X-Tomcat-NG: microsoft.public.applicationcenter.setup

I am building a 2 node ac2000 cluster on Win 2003

We just want the cluster to be used to serve our external websites, which
do
not at this stage contain any COM+ components, nor (so the dev guys tell
me)
do they require MSDTC.

Installing Application center 2000, with the "com + system Application
service " and "DTC" service disabled, I get the error "setup was unable to
verify COM+ components", and of course, the complusverify exe reports
problems.

So, is com+ needed for Ac2000 to function correctly?

Also, given that the cluster is a bastion host (in our DMZ), I have been
using the "Windows server 2003 Security guide" as a reference for locking
down the machine as much as possible.

Can you advise which services I MUST have started (or at least have set to
manual rather than disabled) for AC2000 to fuction correctly??.
I am especially wondering about the following:

RPC
Server
Workstation
TCP/IP Netbios helper

(or anything else that I should not disable?)

Thanks for your help
Cheers!
Nick

[ Post a follow-up to this message ]