From: Gorge on
Hi All,

Looking for advice on deploying a public website in IIS 7. Specific things
im looking for is security. IE, the server being on a domain, what the
implications are going to be etc.

Thanks All.

From: Frankster on

"Gorge" <t(a)t.com> wrote in message
news:%23hTxoKKrKHA.3800(a)TK2MSFTNGP06.phx.gbl...
> Hi All,
>
> Looking for advice on deploying a public website in IIS 7. Specific things
> im looking for is security. IE, the server being on a domain, what the
> implications are going to be etc.
>
> Thanks All.

IIS 7 is pretty secure right out of the box (unlike some of its
predecessors). Your method would probably suite your purpose, assuming the
IIS server is not a Domain Controller. Being a "member" of the Domain is
not as risky as it is being a Domain Controller.

That being said... how much money you got? If this is a low-budget deal
without real sensitive data or without any real financial risk should it be
compromised, go for it. If you have some money to "do it right", or you do
have sensitive data or significant financial risk.... the web server should
not be a part of the domain at all.

Obviously it is assumed that you have some kind of network firewall in front
of the web server. That is pretty much a requirement too.

-Frank