Best way to provide access to resources between 2 distinct compani

[Guest]

Our firm has a limited partnership with another firm in Europe. We have
established a permanent VPN connection between our two offices. They're
running a Windows 2000 AD domain and we're running a Windows 2003 AD domain.
We would like to be able to share a limited amount of file resources between
the two companies, with the following restrictions:

- Neither side wants to maintain individual user accounts for every user
that needs access to the other side. Currently we have a single user account
in each domain for the other company to use to log in. Of course, this means
that remote users are always needing to type in the username and password.
- If the partnership should end some day, it needs to be simple to
decommission the relationship.

What I have envisioned in my head would be something similar to the way
Gateway Services for Netware worked in that you could create a local share
that actually maps back to the other location in the background. Is this
something that's possible? I'm willing to pursue any 3rd party software if
necessary...but haven't found anything that suits at this point.

Thanks.

 

[Doug Sherman [MVP]]

If you just want to share folders, you should be able to map drives by using
the following in a .bat file:

net use x: \\<ServerNameorIPaddress\ShareName> /USER:<single
username>@domain.com <password>

Doug Sherman
MCSE, MCSA, MCP+I, MVP

 

[Pegasus \(MVP\)]

Our firm has a limited partnership with another firm in Europe. We have
established a permanent VPN connection between our two offices. They're
running a Windows 2000 AD domain and we're running a Windows 2003 AD domain.
We would like to be able to share a limited amount of file resources between
the two companies, with the following restrictions:

- Neither side wants to maintain individual user accounts for every user
that needs access to the other side. Currently we have a single user account
in each domain for the other company to use to log in. Of course, this means
that remote users are always needing to type in the username and password.
- If the partnership should end some day, it needs to be simple to
decommission the relationship.

What I have envisioned in my head would be something similar to the way
Gateway Services for Netware worked in that you could create a local share
that actually maps back to the other location in the background. Is this
something that's possible? I'm willing to pursue any 3rd party software if
necessary...but haven't found anything that suits at this point.

Thanks.

How about creating a logon script that maps a specific share
to a drive letter? In parallel with this you would need to set
appropriate NTFS permissions to restrict access to the
various resources.

When the partnership ends you simply delete the logon
account belonging to the other party.

 

[Guest]

Hmm...sometimes the best solutions are the simplest. This should work
perfectly...thanks for reminding me of the basics!