RE: Windows Active Directory Domains

There separate technologies mentioned.

1. Authentication
2. Network segmentation

Active directory is a hierarchy of objects you can "do" stuff with.  You ca=
n apply policies to affect client machines.  You can create groupings of ob=
jects to centralize configuration.  The relationships are hierarchical.  If=
 the account details contained in an OU (Folder) are wished to be kept priv=
ate, then make a different OU parallel to the existing OU.

Then you can restrict the user's ability to search specific OUs: "Anyone in=
 OU=3DCompany, has a search base of OU=3DCompany."  They will never see the=
 OU=3DHR.

HR
-User
-Computer
Company
-User
-Computer

With forethought and design, there isn't a reason to have the two servers i=
n the forest for this scenario.  Additionally the firewall segmentation isn=
't necessary either.  Using NTFS file share permissions will keep users out=
 of sensitive data.  Now there are many variables and 100 different ways to=
 solve any IT problem so by all means this is not the only solution.  Good =
luck, AD is a powerful tool that can help control an environment.

Best Regards,
Chris Wessells

Chris Wessells | Sr. Network & Systems Engineer
MetaSource, LLC | 12894 Pony Express Road, Suite 700 | Draper, UT  84020-83=
34
office 801 984-6606 | mobile 385 202 3735 | [email protected]

-----Original Message-----
From: [email protected] [mailto:[email protected]] On=
 Behalf Of [email protected]
Sent: Tuesday, July 8, 2014 2:48 PM
To: [email protected]
Subject: Windows Active Directory Domains

I have a scenario where I am trying to evaluate the security benefits of an=
 Active Directory domain structure.

We will call the company XYX Inc. They have an AD Forest/Domain for general=
 users. They also have a separate AD Forest/Domain for their HR Users that =
is behind a firewall.

The claim is that the separate forests with a one way trust provides the ne=
cessary security to protect the HR Information.

My thinking is that having the users/servers in the same forest would provi=
de additional benefit of ease of use for the technical team. Using the alre=
ady existing firewall, separate the servers behind the firewall for the nee=
ded protection of HR files.

Before I make a recommendation of one way or the other, I wanted to elicit =
the ideas of others who may have seen similar situations.

Thanks

Joe Brown

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we=
 examine the importance of Apache-SSL and who needs an SSL certificate.  We=
 look at how SSL works, how it benefits your company and how your customers=
 can tell if a site is secure. You will find out how to test, purchase, ins=
tall and use a thawte Digital Certificate on your Apache web server. Throug=
hout, best practices for set-up are highlighted to help you ensure efficien=
t ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f72=
7d1
------------------------------------------------------------------------


________________________________

NOTICE:
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended only =
for the use of the Individual (s) named above. If you are not the intended =
recipient of this e-mail, or the employee or agent responsible for deliveri=
ng this to the intended recipient, you are hereby notified that any dissemi=
nation or copying of this e-mail is strictly prohibited. If you have receiv=
ed this e-mail in error, please immediately notify us by telephone at 215-7=
88-8885 or notify us by e-mail at [email protected]. Also, please mail a=
 hardcopy of the e-mail to MetaSource at 1900 Frost Road, Suite 100, Bristo=
l, PA 19007 via the U.S. Postal Service. We will reimburse you for all expe=
nses incurred.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------