Tallan's Technology Blog

Tallan's Top Technologists Share Their Thoughts on Today's Technology Challenges

7 Comments. Leave new

Reddy Kadasani
April 30, 2013 4:44 pm

Ashraf,
Can you use the same setup to create an extranet zone on an existing farm that is being used for intranet?

Ashraf Hameed
April 30, 2013 9:17 pm

Yes, after extending the existing intranet web application to an Extranet zone, the farm could be split between the perimeter network and the internal network, then one or more WFEs could be setup in the perimeter network along with an AD, and the SQL database with App server(s) all remain in the local network.
You can then apply the trust between the AD in the perimeter network and the local AD in the internal network.

In the instructions you have: “Before going to Central Administration and configuring the User Profile Service Application, make sure that you have your users from the corporate domain (domain.local) in an OU (organization unit) in the domain.ext domain controller.”

On my external domain there doesn’t appear to be anyway to add internal users to an OU. However, I can add internal users to a member server of the external domain.

Thanks,

Craig

Ashraf Hameed
August 30, 2013 9:44 am

Craig,
Are you trying to add the internal user to an internal OU or an external one ?

Thanks,
Ashraf

External OU. I am unable to enumerate any internal accounts (for permission purposes) on the extranet SP server if the app pool is running under an external domain service acount. However, I can enumerate the internal accounts for sites running under the built-in service account.
You stated to make sure your internal users are in an OU on the external DC. I don’t see any way to do that. I can add groups, but not users.

Thanks,

Craig

Hi Ashraf,

I am running into the issue as Craig. Could you please elaborate a bit on what you meant with:
“Before going to Central Administration and configuring the User Profile Service Application, make sure that you have your users from the corporate domain (domain.local) in an OU (organization unit) in the domain.ext domain controller.”?

Thanks in advance, Michael

Ashraf Hameed
October 16, 2013 2:38 pm

Michael, by that I mean importing your users to the external domain from the local one, have you tried that? also check to see if you can resolve users in people picker in SharePoint. If you are still running into problems then there could be other issues in the way (DNS, Name resolution, etc..).

If you aren’t sure what’s the issues, I suggest setting a two-way trust, import your users, then set the trust back to one-way.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

\\\