After a security review, I'm splitting the tiers of a Windows 2008 Server application that is currently on a single machine in the corporate domain. I want to move the IIS 7 Web UI to a new machine in the domain so users can authenticate against it using their AD accounts and leave the rest (the application tier and database server) on the current machine but moved off the domain behind a firewall.
The app tier services need to create files on various shares on domain servers. Previously the services ran as a special domain user with access to the shares. Now that won't be possible.
Is there a way of allowing access to shared folders (and resources generally) on domain servers to non-domain users/machines?