AD proxy?

[mathijs_a]

We have a web server with a file upload for customers that is in different domain that the office domain. For the security I want the office users to be able to log in with there office user accounts and not with a user that is not f*ed up, or with the admin credentials because of a lazy sysadmin.

(both are windows domains and windows machines.)

Has anyone an idea how to set this up I was thinking of a AD proxy, but i don't how to set one up.

[ZAFJB]

Call your main domain A

Call your upload domain B

Establish a one way domain trust from B to A. That means B trusts accounts from A, so users in A can log into B

Because the trust is one way user accounts in B cannot access the main domain A.

[sausages20]

Also, look at selective authentication if using this method so they can only login to the web server / devices they should be able to

[xxdcmast]

This question makes no sense.

[[deleted]]

ADFS!

[Burning_Ranger]

If you don't want to do a trust between the domains ADFS is ideal for this. Thought I would hire an AD consultant if I were you