Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm thinking about offering cloud services to local SMB's. Nothing major - email, data storage, remote access, productivity tools etc. To do this I was going to implement Microsofts small business server and create separate domains for each business that signs up for the service. Access would be provided over a VPN so resources would transfer securely and data could appear as mapped drives on local client systems.

I do worry about how this kind of configuration would operate over WAN links. Authentication to the domain and access to resources being of a particularly pressing concern. Can anyone offer some insights on the chances of this working or suggest an alternative setup?

share|improve this question

closed as not a real question by John Gardeniers, Evan Anderson, HopelessN00b, voretaq7 Nov 11 '12 at 1:33

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

I really think you're stepping way beyond the realms of reason if you want to use SBS in this manner. I would also suggest you check whether or not that falls within the SBS license. – John Gardeniers Aug 17 '12 at 9:48
This is really a design and architecture question which many times are off topic. This is border-line IMO. – Brent Pabst Aug 17 '12 at 19:03
This is way off-topic for Server Fault. It's also a violation of the terms of the SBS license, in my interpretation of the license. – Evan Anderson Aug 17 '12 at 19:18
It may be better off at – Brent Pabst Aug 17 '12 at 21:09
up vote 1 down vote accepted

I have heard talk of this before however I have a simple solution:

Active Directory is one service that should not be place in the "cloud". It is by far the hardest service to implement as a cloud environment simply because it sits pretty close to the network stack as it is.


  • DNS Lookups - You would have to route all DNS lookups to your cloud environment first to look for resources and then do web lookups for everything else. If your service is offline they have no internet, that would really make some customers mad.
  • John mentioned some licensing issues above, you'd have to have a lawyer review the EULA from Microsoft, expect some major cost here.
  • You would have to convince your potential clients that their information is secure. I really don't know how you convince them of this.

Alternate Business Plan

Instead of trying to build out an environment of your own for each customer why don't you simply combine multiple service offerings into one. For instance:

  • Buy and Install a Tower Server to run internal services such as DC, DNS, etc. This helps you manage usernames and passwords. There is nothing preventing you from buying a server and OS license and then "renting"/"leasing" the hardware to another business in a subscription model. If they decide to leave you come claim your server and be on your way.
  • Don't even worry with a server... simply setup Microsoft InTune on their Windows workstations and use that to manage usernames, passwords, etc. You can even manage the entire update and maintenance from that client as well.
  • Leverage cloud providers for collaboration tools. Office 365 would be a good start. More recently Microsoft announced new billing mechanisms for partners that will allow you to directly bill clients so you can bundle other value add services along with both the InTune and Offcie 365 offering.

What does this mean?

Essentially you utilize the resources of other providers, Microsoft being my example, and add value on top of that, be it customer services, help desk, whatever. Regardless all of these solutions allow your customers to grow and scale and allow you to be active in their technology decisions.

Regardless I would not try to do any AD stuff remotely or over a VPN you are simply asking for trouble in more ways than one.

share|improve this answer
Thank you for the wisdom Brent. I was half expecting this to be a long shot from the start and you solidified that stance. I never thought of "leasing" servers to my clients and think that is a great idea as the whole point of my previous strategy was to offer a service that would give me a recurring source of income. Kudos – Adam Aug 18 '12 at 3:58
Just a note about ServerFault but if an answer is acceptable be sure to upvote it as well. Same goes for questions you find helpful. Of course if the answer wasn't helpful thats fine too! – Brent Pabst Aug 18 '12 at 14:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.