Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Here is my situation. I have an ASP.NET web app hosted in IIS inside of a large corporate network in the U.S. The site uses the currently logged in user's windows name for security - so it looks at the user name and determines what they can and cannot do.

Now, the South-American based operation of my client wants to use this application as well. We do not want to have to set up a separate server for them, nor a separate codebase, and they are not worried about translation of the English site, as they all speak English.

They are all on a totally separate network, with their own logins and domains. There are no hard links between the two corporate networks other than the internet itself.

What is the best way to give them access to this internal ASP.NET app? Some users can get in via a VPN connection, but that is sort of a pain to set up for each user, plus it requires that they have a separate login for the U.S. domain.

Could this be accomplished by a permanent VPN between the networks and a trust between the domains?

share|improve this question
add comment

1 Answer

up vote 5 down vote accepted

I believe the only way to do it without changing how the authentication works on the website will be to do as you said, create a vpn tunnel between the networks and a trust between the domains.

This page contains a walkthrough for setting up a trust.

share|improve this answer
    
Once that is done, I could see the trusted domain in the list of domains when I go to give a user permission to a folder, correct (for instance)? –  Sam Schutte May 8 '09 at 18:55
    
That is correct. See the link I added to the answer for a walkthrough on how to create the trust. –  Jimmie R. Houts May 8 '09 at 20:08
    
Do you know if it is possible to restrict users that come in through a trust relationship to just one or one set of servers? –  Sam Schutte May 14 '09 at 15:32
    
I think you should be able to deny them logon locally through group policy... –  Jimmie R. Houts May 14 '09 at 16:33
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.