IIS Domain

[ankit0680]

Hello,
I know this is probably a NEWB questions, but I am confused so any help would be greatly appreciated.
I am working in an environemnt adn I wnat to know standards, we have a domain, adn in our DMZ we have a IIS box that is not on the domain, is thier a way to connect IIS to the domain or is this even un necesary, it is simply a webserver, that sends data into the domain for Biztalk.

 

[jimdwa]

Do you mean that you want to join the IIS server that is in the DMZ to the domain that is in the "inside" protected security zone? This would require opening ports in the firewall between the IIS server and the domain controller. his requires several LDAP ports, kerberos, RPC, SMB for file sharing, among others. Since webservers are a main target for hackers I'd leave it out there in the DMZ.

 

[Tyras]

Although as stated above it can be done, I'd recomend against this action due to security reasons.