Re: Trusting external domain

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I think that many professionals will tell you that, from a security
standpoint, you should not have a copy of your internal DNS sitting on a DMZ
DC...

Something to research a bit more perhaps.


"Joe" wrote:

> That worked. I just wanted to take a minute and say thanks!
>
> "Joe" wrote:
>
> > Thanks guys. I'll give it a shot! Much appreciated.
> >
> > "SPollack" wrote:
> >
> > >
> > > Ryan is absolutely right. After creating the secondary zone you should
> > > be able to create the trust.
> > >
> > >
> > > --
> > > SPollack
> > > ------------------------------------------------------------------------
> > > SPollack's Profile: http://forums.techarena.in/member.php?userid=5880
> > > View this thread: http://forums.techarena.in/showthread.php?t=92456
> > > Visit - http://forums.techarena.in/archive/index.php/
> > >
> > >
.

Relevant Pages

  • Re: Trusting external domain
    ... hosts file for the other DC? ... > standpoint, you should not have a copy of your internal DNS sitting on a DMZ ...
    (microsoft.public.windows.server.active_directory)
  • Re: DMZ NT4 TO Internal 2000 AD One-Way Trust via Firewall
    ... leverage an effectivity security policy to ensure that password complexities ... > currently a mess of local and domain users, no security policy, etc. ... DMZ, not publicly accessible) that aren't going away within the stated ... to non-DC web servers in the DMZ on 80 and 443 - none of which are directed ...
    (microsoft.public.windows.server.active_directory)
  • Re: webdav on SBS2003
    ... Traditional FW architecture describes a DMZ, ... DMZ and LAN. ... DMZ is that the entire server isn't exposed in the zone, ... you depend on Windows Security to ...
    (microsoft.public.windows.server.sbs)
  • Re: DMZ & Security
    ... > yes, deployement price, security level (depending what ... > open ports... ... > case what sense has my DMZ? ... if I have a web server on DMZ that have to access sqlserver database ...
    (microsoft.public.security)
  • RE: AD in the DMZ . . . OK?
    ... additional methods (i.e. IPSec, SSL with client authentication ... the DMZ and don't have a secure VPN tunnel that supports Kerberos, ... tunnel and/or a properly designed .NET app can minimize the risk. ... And security risk is always just a cost/benefit trade ...
    (Security-Basics)