Home / server / Questions / 127550
Accepted
Rajeev
Asked: 2010-03-30 20:56:17 +0800 CST

Physical hardware required to enable AD LDS service, can it be placed as a stand alone server on the DMZ

  • 772

If I want to implement AD LDS for a single application, does it require Physical hardware or it can be installed/enabled on web server or application server. As usually the web and app servers are placed in DMZ if the above option is not feasible can we put standalone AD LDS server n DMZ.

ad-lds

1 Answers

  1. Best Answer

    This technet article should answer most of your questions: http://technet.microsoft.com/en-us/library/cc755080%28WS.10%29.aspx

    LDS is suitable for applications that will benefit from storing data in a directory, but as the article states, it's limited as follows:

    AD LDS differs from AD DS primarily in that it does not store Windows security principals. While AD LDS can use Windows security principals (such as domain users) in access control lists (ACLs) that control access to objects in AD LDS, Windows cannot authenticate users stored in AD LDS or use AD LDS users in its ACLs. In addition, AD LDS does not support domains and forests, Group Policy, or global catalogs.

    To the original question: Yes, it can be installed on the same server as your application.

    • 0