Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Extending file services to another forest / domain users

Posted on 2008-06-25
5
Medium Priority
?
190 Views
Last Modified: 2010-04-18
There is a need to share AD objects, primarily files residing on an AD integrated NAS box, to our users on the Internet, and also to another set of users from one of our JV company's that runs it's own Windows 2003 Std. infrastructure. Ours is native Windows 2003 R2.

I want to avoid establishing trust between the two forests just for the sake of sharing files across which is currently accomplished by FTP transfers. What are my aternatives?
0
Comment
Question by:fahim
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 21875120
Sharepoint with AD FS for federated authentication.  Non-trivial to deploy, but it negates the need for an Active Directory trust or for VPN connecitivity between offices.

http://support.microsoft.com/default.aspx/kb/912492
http://blogs.technet.com/adfs_documentation/archive/2007/02/16/adfs-sharepoint-server-2007-new-content-available.aspx
0
 

Author Comment

by:fahim
ID: 21905448
Laura, having taken some time to read the stuff, I am a bit wary of two aspects:

1. It seems like AD FS needs to be deployed on both the forests and it rings about schema changes within AD. This is critical as I might not be able to convince our associated partners of undertaking this 'bit' risky operation on their current operational AD org.

2. AD FS over sharepoint is only available as a web interface over IIS. That means, I use browser for tranferring/sharing my files even after I deploy AD FS. Is there any other  (non browser) alternative?

You mentioned that AD FS is 'non trivial' to deploy. Pls elaborate a bit more on this aspect. Does non trivial also imply 'risky'?
Thanks!!
0
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 2000 total points
ID: 21910765
1. AD FS does not require schema extensions.

2. AD FS provides web functionality only in its current release, this may change in future releases but nothing has been definitively announced.

3. Non-trivial only implies 'risky' if you do not test before you deploy; this applies to AD FS as much as any technology.
0
 

Author Comment

by:fahim
ID: 21917705
Laura one last point...should I presume 'yes' to my earlier query that I would need to enable ADFS on both the forests, 'to and from' I need to share AD objects/documents!!!??
0
 

Author Comment

by:fahim
ID: 21980117
Calling Laura...!!

Laura...Do I need to enable ADFS on both the forests across which I need to share my files/folders? Pls reply!
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

664 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question