Re: Windows Active Directory Domains

Will Boling <[email protected]> Wed, 9 Jul 2014 09:55:52 -0400
Newsgroups gmane.comp.security.basics
Message-ID <[email protected]>
Joe,

I see very, very little benefit in separating the domains.  Honestly, it =
sounds like an excuse to not setup share permissions and other things =
correctly within a shared domain.  =46rom a management perspective, I =
could see this being a huge pain.  I would recommend having them =
consolidate the domain into one and having someone help them with =
permissions and object security within the domain.  Could they not =
utilize ACLs and VLANs on switches to provide the level of security =
they=92re trying to use the firewall for?

Thank you,
Will

On Jul 8, 2014, at 4:48 PM, [email protected] wrote:

> I have a scenario where I am trying to evaluate the security benefits =
of an Active Directory domain structure.
>=20
> We will call the company XYX Inc. They have an AD Forest/Domain for =
general users. They also have a separate AD Forest/Domain for their HR =
Users that is behind a firewall.=20
>=20
> The claim is that the separate forests with a one way trust provides =
the necessary security to protect the HR Information. =20
>=20
> My thinking is that having the users/servers in the same forest would =
provide additional benefit of ease of use for the technical team. Using =
the already existing firewall, separate the servers behind the firewall =
for the needed protection of HR files.
>=20
> Before I make a recommendation of one way or the other, I wanted to =
elicit the ideas of others who may have seen similar situations.=20
>=20
> Thanks
>=20
> Joe Brown
>=20
> =
------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an =
SSL certificate.  We look at how SSL works, how it benefits your company =
and how your customers can tell if a site is secure. You will find out =
how to test, purchase, install and use a thawte Digital Certificate on =
your Apache web server. Throughout, best practices for set-up are =
highlighted to help you ensure efficient ongoing management of your =
encryption keys and digital certificates.
>=20
> =
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f7=
27d1
> =
------------------------------------------------------------------------
>=20


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------