Solved

Extending file services to another forest / domain users

Posted on 2008-06-25
5
189 Views
Last Modified: 2010-04-18
There is a need to share AD objects, primarily files residing on an AD integrated NAS box, to our users on the Internet, and also to another set of users from one of our JV company's that runs it's own Windows 2003 Std. infrastructure. Ours is native Windows 2003 R2.

I want to avoid establishing trust between the two forests just for the sake of sharing files across which is currently accomplished by FTP transfers. What are my aternatives?
0
Comment
Question by:fahim
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 21875120
Sharepoint with AD FS for federated authentication.  Non-trivial to deploy, but it negates the need for an Active Directory trust or for VPN connecitivity between offices.

http://support.microsoft.com/default.aspx/kb/912492
http://blogs.technet.com/adfs_documentation/archive/2007/02/16/adfs-sharepoint-server-2007-new-content-available.aspx
0
 

Author Comment

by:fahim
ID: 21905448
Laura, having taken some time to read the stuff, I am a bit wary of two aspects:

1. It seems like AD FS needs to be deployed on both the forests and it rings about schema changes within AD. This is critical as I might not be able to convince our associated partners of undertaking this 'bit' risky operation on their current operational AD org.

2. AD FS over sharepoint is only available as a web interface over IIS. That means, I use browser for tranferring/sharing my files even after I deploy AD FS. Is there any other  (non browser) alternative?

You mentioned that AD FS is 'non trivial' to deploy. Pls elaborate a bit more on this aspect. Does non trivial also imply 'risky'?
Thanks!!
0
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 500 total points
ID: 21910765
1. AD FS does not require schema extensions.

2. AD FS provides web functionality only in its current release, this may change in future releases but nothing has been definitively announced.

3. Non-trivial only implies 'risky' if you do not test before you deploy; this applies to AD FS as much as any technology.
0
 

Author Comment

by:fahim
ID: 21917705
Laura one last point...should I presume 'yes' to my earlier query that I would need to enable ADFS on both the forests, 'to and from' I need to share AD objects/documents!!!??
0
 

Author Comment

by:fahim
ID: 21980117
Calling Laura...!!

Laura...Do I need to enable ADFS on both the forests across which I need to share my files/folders? Pls reply!
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question