Re: MOSS Hosting

Or, possibly, they deployed separate virtual machines for the clients,
either setup with their own AD, or using the server's SAM for
authentication.

-callahan
"AJ" <andyjones99@xxxxxxxxxxxxx> wrote in message
news:cbfe6b03-1278-4043-b98b-7fb2722cca4b@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On 4 Jul, 20:07, "John Timney \(MVP\)" <xyz_j...@xxxxxxxxxxxxxxxxxxxx>
wrote:
What exactly are they wanting to access via central admin. I certainly
wouldn't let them near it just because they asked!

Regards

John Timney (MVP)http://www.johntimney.comhttp://www.johntimney.com/blog

"AJ" <andyjone...@xxxxxxxxxxxxx> wrote in message

news:079f51c2-4085-43c4-9aaa-0b80aeafb973@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx



Hello All

We host a few sharepoint 2007 sites for a few clients (SPLA). The way
our setup is configured at the moment is that we configure their top
level site for them and just provide them with an access URL, they
dont get access to Central Admin. Therefore If anything is required to
be enabled on the server, for example the InfoPath forms service, they
request this via a support ticket.

We now have the requirement to provide a dedicated service to a
specific customer who wants to be able to use Central Admin. The
problem as I see it is that the dedicated service is in our hosting AD
domain and therefore they could cause problems and also probably
browse our AD (?)

Is there a way,apart from creating them in their own domain, that we
can stop them interogating our hosting AD?

What are the real risks if we let them lose with central admin on a
MOSS server in our hosting domain.

Any thoughts and advice would be most welcome.

Thanks

Andy- Hide quoted text -

- Show quoted text -

Hi John
Thanks for your input. I think this is the stance that we are going to
take. However I have seen other companies that offer full central
admin access so I was also curious to how they did this. I guess they
deployed a seperate AD forest specifically for that customer, or is
there someway this can be done using forms based authentication and
SQL server as the accounts repository?
Thanks
Andy


.

Relevant Pages

  • Re: Wrong Logonserver users getting second site:
    ... people working when the wrong server was being used for authentication. ... second site for authentication, How can i test this and what could be ... run Dcdiag no errors, Sites & services is setup ...
    (microsoft.public.windows.server.active_directory)
  • Re: MX Records
    ... If you already have someone hosting your ... setup or change A and MX records for these domains through the Network ... server as a backup to yours and all mail will be forwarded to your server ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS for multiple Internet DNS domains
    ... create zones for your 2 new domains, and populate the MX records for them to ... >>tom is correct about the external DNS setup. ... >>Hosting additional domains once the internet records are ... >>exchagne server. ...
    (microsoft.public.exchange.connectivity)
  • Re: Problem with HTTP access (msmdpump.dll) to SSAS on a machine different than the one where Analys
    ... I use integrated windows authentication. ... How would I setup this kerberos delegation system? ... It is OK to use ascmd with http. ... I can access the server with no http. ...
    (microsoft.public.sqlserver.olap)
  • Re: Form based auth doesnt work normal popup logon window appears
    ... even restarted my server to exclude those options. ... You cannot use form based authentication and you see or not see ... Above stept can be executed within the Exchange ... Ok, setup went on checking and gave me a error, what else. ...
    (microsoft.public.exchange.setup)
Loading