Which domain should I create my Service accounts in when deploying an Extranet on a Sharepoint WFE in the DMZ?

Question

I am trying to install sharepoint on a server in the DMZ. Which domain (local or public (DMZ)) do I create the Service accounts in? Thanks

What is the farm topology (where do the servers physically reside)? What sort of domain trust is there? Where is the SQL Server?
@shufler SQL2008 server(1) in local domain and Sahrepoint 2010 server(1) in public domain. The domain trust is two way. All the servers are virtual.
If the trust is two-way, it doesn't technically matter as a service account in either domain can be authenticated and authorized on machines in both domains. So the question to you is, Where do you want them to live?
@shufler I have them setup in the public domain AD. I am not really concerned about where they reside but am concerned on whether this would have any implications in the near future.
@shufler For example while trying to sync all user profiles from the local domain using a public\spfarm account will conflict. How would I overcome this?

user7400 · Accepted Answer · 2012-05-01 16:18:35Z

up vote 0 down vote accepted

Well, I ended up creating all the accounts in the Public Domain and did not have any issues. Thanks again for all the posts.

answered May 1 '12 at 16:18

user7400
613429

1 Answer