I am building an intranet application for a Windows Domain based network. It is a client-server application - the server being an ASP .NET web application and the clients - .NET 2.0 based desktop applications. I intend to use Active Directory and Group policies to install the client application across clients in the network.
Are there any general guidelines that need to be followed for building an application of this sort?
Any security issues to be aware of?
Is it okay to have a web application work as your server in an intranet solution of this sort - given that clients wouldn't communicate with the server using sockets - instead clients would communicate with the server using simple web service calls?
Anything in particular that I need to know before going ahead with this type of app-building?