Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been tasked to remove an external SharePoint server that resides in our DMZ from the domain. Can I do this? I know the implications of our domain users no longer being able to access the site with their domain credentials but are there other alternatives to accomplish this scenario? Is there supporting documentation to support or advisement against doing so? We have the server sort of "locked down" by restricting by IP address but now our security team wants it removed totally from the domain as it is a security risk to our domain by sitting out there in the DMZ.

share|improve this question
Why not move it to the internal network? – joeqwerty Aug 4 '10 at 1:45

Running SharePoint in a workgroup may be possible (on some versions, with some messing about), but it's definitely not a supported configuration. So best to run with 'SharePoint requires a domain to operate'.

So that said, you probably have 2 choices:

  • Create a dedicated DMZ domain and migrate SharePoint to that domain.
  • Migrate SharePoint back from the DMZ to LAN, and add a Reverse Proxy in your DMZ to tunnel external SharePoint traffic across your network securely.
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.