Re: Active Directory and IIS-6

From: Leon Mayne [MVP] (l.rmv.mayne_at_uea.ac.uk)
Date: 09/28/05 

Date: Wed, 28 Sep 2005 12:38:35 +0100

Thomas McFarlane wrote:
> Is it best practice to join an IIS-6 (run on Windows 2003 server) to a
> Windows 2003 Active Directory Domain ? Do you have any
> references/articles about this subject ?

Not sure of any articles, but in general I would say yes, because:
1) You can manage the policies and patches for the server centrally
2) You get the domain security model implemented (e.g. users can use their
domain accounts to log on to your web applications)
3) You can use Kerberos authentication for web apps, if required

It depends on the situation. I guess there are circumstances when you would
want the server to be completely standalone, but if it's going to be a
webserver for your internal organisation apps then I don't see why you
wouldn't want to put it in the domain.

Relevant Pages

  • SecurityFocus new article announcement
    ... The following articles are now available from SecurityFocus: ... Honeypots: Are They Illegal? ... with an overview of Web applications - how they work, ... Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! ...
    (Security-Basics)
  • Security Strategy for both WIndows Forms and Web Forms
    ... I need to design a custom security Authentication and Authorization ... framework that is unified for both windows and web applications. ... number of articles, including this one, ...
    (microsoft.public.dotnet.security)