Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

We want to setup a WSS (not MOSS) web farm in a DMZ without Active Directory. We're envisioning two WFEs and a separate SQL server for the databases. We've already got the first WFE and SQL Server setup, but are having difficulties adding the second WFE. Is it even possible to do this? Based on these articles, I'm beginning to think it isn't. :-(

http://blogs.msdn.com/rkramesh/archive/2009/03/06/hi-title.aspx

http://stackoverflow.com/questions/366639/is-it-possible-to-create-a-multi-server-sharepoint-farm-in-the-dmz-without-using

http://www.sharepointoverflow.com/questions/561/installing-moss-in-dmz-with-no-ad

share|improve this question

5 Answers 5

You need some sort of domain in order to perform the installation. If AD is required in the DMZ, most companies I've seen configure a second forest for this purpose.

share|improve this answer

AFAIK, you will need a domain.

If you have more than one server I think using a domain is must have. You could consider adding Active Directory Application Mode (ADAM) but I found it to be more unusual/different setup than standard AD so I usually use normal AD. If this is virtualized environment you might want to add one additional virtual machine as your DC (on top of Windows 2008 Server Core).

share|improve this answer

AFAIK it requires AD whenever multiple servers are involved. That doesn't have to mean that you are using AD for authentication, you can still use anonymous or FBA. Local accounts cannot work because they are local to that system so users would not have any access to the other servers. I would recommend setting up a separate forest.

share|improve this answer

you require Domain Accounts for the Farm account and other service identities. if you want more than one SharePoint machine, you must deploy AD.

share|improve this answer

Scaling up the farm i.e. having more than one server is not possible with DMZ, you definetly need domain account.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.