Re: IIS and SQL Server on different machines: how to connect with windows security

From: Bronek Kozicki (brok_at_rubikon.pl)
Date: 06/27/03 

Date: Fri, 27 Jun 2003 19:46:46 +0200

Paolo C <paoloC@com4.ok> wrote:
> So, what do you think is the best way to connect from ASP
> using windows authentication from a remote machine?

Set up domain for internet users, it should be placed in the same
network as IIS and SQL (and isolated from your internal network, the
same way you isolate other DMZ servers). Domain will not only allow you
use domain acocunts in web applications, you can also use AD features to
increase your security (Kerberos, digest auth., GPO etc.)

> I thought connecting to db
> with theese users from asp and aspx page is the
> reccomended practice...

Not quite; user roles and NT user groups should be used for permision
management in SQL Server ...

B.

Quantcast