Looking for a step by step how to for using D LDS or AD FS in DMZ

Hi,
Here´s my opinion About the DMZ subject.

First of All what is a DMZ?
DMZ is short for DeMilitarized Zone. In military jargon, a DMZ is an area of land that serves as a buffer between two enemies. The most well known DMZ in the world is the DMZ that protects South Korea from North Korea.In network security jargon, a DMZ is a network that serves as a buffer between a secure protected internal network and the insecure Internet.A DMZ usually contains servers which provide services to users from the Internet, such as web, ftp, email (SMTP, POP3 and IMAP4), and DNS servers. Although these servers must be open to limited access from the Internet, they should also be protected by a firewall.
The term Perimeter Network is also used to describe a DMZ.
My opinion.
For security  reasons everyone (IT SPEAKING), needs a DMZ. Why? Because you should not put in risk our beloved internal network with external services. For example if someone that as nothing better to do then to attack a Internet Site, should not be able to damage the internal network.

But let´s face it, 90% of the company´s uses the DMZ to put OWA, HTTPS/RPC,ACTIVESYNC and the mail relay server (Exchange 2007 Speaking Edge Server). So what is the real benefit?

OWA  If use 443 https, secure connections (Attack probability of success 3 to 4%)
HTTPS/RPC  You use the same door as OWA 443 (Attack Probability 3 to 4%)
ActiveSync  If use Certificates to validate (Attack Probability 2 to 3%)
Relay Server  This one is different here you can have a lot of problems (Virus, Hacks etc. etc. etc.), 90% of the attacks made to this server the result is Server Down .

So my opinion for your situation for the moment is : keep it simple and working, when you have everything working as you want then try to implement this solution on the DMZ.
I think no one can advise you to give up on a DMZ, the simple fact of separate our internal network with our Public Network in term of loads should be enough to do it.
The security measures are the most important of all things. But the security that isa can provide by using secure nat, SSL tunnels from the isa to the target machine should be enough for you to start up with Security .