upgrading my domain/active directory over internet.

hazeehazee
edited March 2009 in Science & Tech
I have a domain controller installed in a local premises. I have to make this server available over the internet that the users in other cities/countries can login to their active directory profiles(global), make any changes and log off.

The actual requirement of the department is to have the updated files always as the users will access active directory account through vpn or any other mean.

My questions are;
What are the way to take my server online other than buying a static IP from ISP with a leased line.
And what are the different ways that users can login to the active directory accounts. (one is vpn over xDSL)
Is there any other solution to this scenario?

Thanks.

Comments

  • ThraxThrax 🐌 Austin, TX Icrontian
    edited March 2009
    Your single best and only effective solution is to permit external VPN connections w/ keyfobs into your network.
  • hazeehazee
    edited March 2009
    What is keyfob? and in what situation I have to allow external VPN. can you explain or provide any link?
  • ShortyShorty Manchester, UK Icrontian
    edited March 2009
    Give us some more requirements.

    What kind of access to what resources to your end users require?
    Where will your users be? Home based? Mobile?
    Will your users be using corporate devices on a corporate AD infrastructure?
    Is your AD infrastructure also providing MS Exchange? What versions of AD/Exchange?

    Help us understand your infrastructure a little more, exposing a domain controller to the internet requires some significant dilligence.
  • hazeehazee
    edited March 2009
    The actual requirement is to edit some Word and Excel sheets that every user will have in his profile/Documents.

    I thought of providing the active directory accounts over internet and let the users log in to the .dat/.man profiles. But I am not sure whether its possible or not. If possible then will that be a cheaper and reliable solution.

    Users can use DSL (from their local ISP) to get connect.
    Corporate devices? You mean, router and so so? No, There is not corporate devices installed yet.
    No MS Exchange.


    Can we make a VPN connection without having a static IP from ISP?
  • ShortyShorty Manchester, UK Icrontian
    edited March 2009
    There are "mechanisms" you can use such as dynamic DNS etc that would work around the static IP requirement but this seems a very awkward way for users to be able to access word/excel documents.

    Questions:

    1. Why do the users have individual work/excel spreadsheets embedded in their user profiles? This sounds very complex and unwieldy. What is the purpose of documents (obviously respecting your companies privacy)?

    2. Why not publish the files over HTTPS using Sharepoint Services? This can also be used when the users are in the office. It also means there is no reliance on a corporate laptop/desktop or mobile device. Any PC with an internet connection and a web browser would work. Sharepoint will use AD communications and is integrated into AD. This will also provide document versioning, concurrency and backup. It also removes the roaming profile data overhead.

    You _could_ implement an SSL VPN solution but lets keep this simple :)
  • QCHQCH Ancient Guru Chicago Area - USA Icrontian
    edited March 2009
    Sounds like Roaming profiles... which should be avoided. I'd suggest using a Virtual Private Network (VPN), which creates an encrypted tunnel between a user and the company network, and then use some of the newer Server 2008 Group Policies to remap their "My Documents" folder to the server if that is what your company requires.

    Most companies just have the files on a file server and have their users VPN onto the network, authenticate to the domain, and then browse the file server for the files they need.

    As for the Static IP address issue... I assume they are not paying their ISP for a small business package since they are not given a fixed IP Address. Really, if the company is talking about remote users, VPN, Domains, and such, they need to pony up for at least one fixed IP address and might as well change from consumer pricing to small business pricing. Most ISP do not garentee their service to home user packagaes. If the network goes down for a day ot two, they say "Sorry and we'll credit your account 2 days worth of service... Thank you have a good day." With a business account, they usually have some sort of service level agreement to keep your access up 99%, 99.9%, 99.99%, or the the best will promise 99.999%. Nothing worse than to have a guy somewhere like across the country and need a document for a client and your ISP drops the line for a day or so.
Sign In or Register to comment.