Member Server in DMZ

I have done some research and know this is generally a bad idea, but... how
would one go about running a Member server joined to a domain (i.e.
domain.local) but reside in the DMZ?

I've looked at ADAM and using IPSec and such things. I'm basically looking
for the best approach to this. There are some internet applications that my
organization would like to authenticate to AD.

Thank you.

Jorge
Tue Aug 19 09:40:48 PDT 2008

Hi
To secure a member server in DMZ, allow only what needs to be allowed in the
firewall, use certificates for communications and Apps. Depending of your
needs and apps, there're multiple designs that can be followed. You can also
search at security ngs.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services