Member Avatar for yachile

is it better to put my Active Directory in DMZ!!
hope someone reply as soon as possible

  • 4 Contributors
  • 3 Replies
  • 210 Views
  • 6 Months Discussion Span
  • Latest Post Latest Post by cguan_77
Member Avatar for JorgeM

Is it better than what..not putting it in a DMZ? Can you clarify what you are trying to design?

You can establish an AD instance in a DMZ and/or just have member servers participate in the DMZ but there are extra security precautions that should be considered.

Generally, if at all possible, your servers in the DMZ are not AD joined, but again, it all depends on the goals and objectives.

Member Avatar for Reverend Jim

Would you put Federation outposts in the Neutral Zone? My understanding of a DMZ is that's where you put stuff you are willing to expose to those outside your secure area. In that case my response would be NO.

Member Avatar for cguan_77

active directort in DMZ, wow...it's a suicide..i think so..
AD should be in the protected network...

if you want AD in DMZ use LDAP instead...

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.