Your idea's please- SBS Domain with a 2003 Server application serv

Discussion in 'Windows Small Business Server' started by Stuart Smith, Jul 12, 2007.

  1. Stuart Smith

    Stuart Smith Guest

    I am installing a SBS server/domain into a business. They currently have a
    2003 Server that is hosting an application only. This does not act as a
    domain serverbut purely hosts the application.

    My usual installation of SBS goes along the text book install of Router to
    WAN NIC on server on a separate IP Segemnt to the LAN NIC on the SBS server
    which then serves all of the LAN with the DOMAIN logons/ Email etc etc.

    What is the best method of incorpoarating this 2003 Server into the LAN side
    of the SBS domain for security and access to the application still but
    without compromising external access to the application server by the company
    that supplied this product.
     
    Stuart Smith, Jul 12, 2007
    #1
    1. Advertisements

  2. Since this Server is essentially in Workgroup Mode, shouldn't be too tough

    After the SBS server is all setup, join the server to the domain, the same
    way you would a brand new additional server using
    http://servername/connectcomputer

    You will probably have to do some fixing of Icon's on the workstation to
    point to the server now that it is part of the domain
     
    Cris Hanna [SBS-MVP], Jul 12, 2007
    #2
    1. Advertisements

  3. What kind of inbound access does this server/application require, and from
    whom/where? Also, what do your LAN users need to access on this box?

    Once you've got AD, you want to be very careful about what you allow into
    your network. If this server requires public access from the internet at
    all, it should likely be put in a DMZ (get a good firewall appliance that
    has an OPT/DMZ port). In fact, unless you're using ISA, and perhaps even if
    you are, a good firewall appliance is a must. I personally like SonicWALLs.
     
    Lanwench [MVP - Exchange], Jul 12, 2007
    #3
  4. Stuart Smith

    Stuart Smith Guest

    Hi Chris & Lanwench...

    This server currently sits direct onto the router but the router has port
    forwarding.... so my plan is to leave these ports open on the router but
    point them to the SBS server and then route the ports on the SBS server to
    the IPADDR of the 2003 server based Application within the LAN...thus
    avoiding any restrictions by bringing it into the the LAN....how does that
    sound....and do you agree with adding it using the normal routine of adding a
    PC to the Domain??
     
    Stuart Smith, Jul 12, 2007
    #4
  5. You have two threads going on this topic, which is generally frowned up

    My question is, after reading your response: Is this a web based app? Are
    you opening it to the world?

    --
    Cris Hanna [SBS-MVP]
    -------------------------------------------------
    Microsoft MVPs
    Independent Experts (MVPs do not work for MS)
    Real World Answers
     
    Cris Hanna [SBS-MVP], Jul 12, 2007
    #5
  6. Stuart Smith

    Stuart Smith Guest

    I know Chris....I accidently posted one and then never realised it had gone
    until I had posted the second...sorry mate.

    The Product will not be open as a Web based product....it is an internal
    product but is supported by a third party using VPN....via port forwarding
    ....not the usual ports for VPN.


    --
    Stu


     
    Stuart Smith, Jul 12, 2007
    #6
  7. just don't want to see your LAN get overly exposed

    --
    Cris Hanna [SBS-MVP]
    -------------------------------------------------
    Microsoft MVPs
    Independent Experts (MVPs do not work for MS)
    Real World Answers
    ---------------------------------------------------------
    Please do not contact me directly regarding issues

     
    Cris Hanna [SBS-MVP], Jul 12, 2007
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.