AD access to a standalone non AD server

We have a 2003 web edition that is in our dmz and is just a member of a
small workgroup.
From inside our AD domain ,our programmers are unable to get r/w access to a
share on this server.
Should this be brought into the AD domain? what ports need be openned for
this? Is there another way?

regards

Tom

I wouldn't do that - create a bridge from your AD domain into the DMZ. It's
inviting security trouble. Especially with developers. Implement Windows
Sharepoint Services on the Web Edition server instead.

--
Todd J Heron, MVP Windows Server - Networking
MCSE - Windows Server 2003/2000/NT; CCA


"NewsGr" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> We have a 2003 web edition that is in our dmz and is just a member of a
> small workgroup.
> From inside our AD domain ,our programmers are unable to get r/w access to
> a share on this server.
> Should this be brought into the AD domain? what ports need be openned
> for this? Is there another way?
>
> regards
>
> Tom

NewsGr wrote:
> We have a 2003 web edition that is in our dmz and is just a member of
> a small workgroup.
> From inside our AD domain ,our programmers are unable to get r/w
> access to a share on this server.
> Should this be brought into the AD domain? what ports need be
> openned for this? Is there another way?

You can do this without adding the machine as a member by creating local
accounts with the same username and password as the domain accounts and use
Authenticated users for accessing this computer from the network. Keeping in
mind that if the domain account password is changed the local account
password will have to be synchronized.

There are quite a few ports to open for domain authentication.
Q179442 - How to Configure a Firewall for Domains and Trusts:
http://support.microsoft.com/default...;EN-US;Q179442


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================