• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 274
  • Last Modified:

Domain or Workgroup

Hi just a quick question im setting up a webserver for my company, i have heard its best not to add a webserver to the company domain and leave it in a workgroup instead, is this right and whats reasons is it for (security probably)

this will be a issue for accing folder on the server from a domain PC wont it?


1 Solution
I would add it to a DMZ if you have the capability.  This way if the machine is compromised they wont have access to your domain.  I would not add it to the domain and just make it a member server.  You can create an account on that box that is the same as your domain acct to make accessing it easier.
If the web server is only for internal/employee use, put it in the domain.

If the web server will be a external facing web server and/or for use for non-employees, it should NOT be put in the domain, unless there are specific function that you must do that would require it to be part of the domain.

If it is external facing you should also isolate it from the rest of the network as much as possible (DMZ as SSG_Hill stated) and get a firewall on it and in front of it.
You could add this to your domain if you want to manage it as part of your network, however it would be important to ensure you have a good firewall and router in place and allow on the required web ports through such as port 80 for http, etc.  It is a security issue, but at the end of the day, your choice.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now