Networks

Ask something
Question Locked

Adding outside external users to your domain

0 helpful
4 replies

by hal12

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I was asked if an external user could be added to our domain. I know this is possible but I wanted to know a best practices approach to this. I want this external user to access some applications but not others. Should this user be setup as a guest and how could I deny them access to our shared drives and applications? This would all be done on a windows server 2008 with the client running XP.

Thank you

4 replies

by markp24

Hi

i would give them a TS page to logon to and restrict there applications to just those they have rights to. I would not give them any access to file browsing/searching/etc./
using a GPO i would restrict it down to just what they needed.
if you just want to deny them access to drives, put them in a "outside users" group in the AD and add that to the security tab on the Share properties for the shares with Access denied .

by robo_dev

From a security and support standpoint, I would recommend something like a Cisco ASA SSL VPN, This can give the user a client-less WebVPN connection which can use LDAP /AD for authentication.

by whiterose_umair

friend use "net control 2" it is software which have many function to restrict the user. with this above mention software you will be also able to observe the user activities as well as you able to restrict them.

This discussion is closed to new replies.