none
Sharepoint services external site cost & setup

    Question

  • I have been recently asked to setup or figure out the cost of setting up a Sharepoint that is internet facing using WSS 3.0.  My question is how much would this cost outside of the price of the OS?  I am also wondering if their is more detailed instructions out there on how to accomplish setting up the site for internet facing as well?  I am looking to set it up with a login box to where certain users can access the site and everyone else can't see anything, so no anon access.  Would this require a seperate AD enviornment or no?
    Tuesday, May 04, 2010 1:01 PM

Answers

  • If your OS is licensed, then WSS doesn't have a cost associated with it.  It's a FREE add-on to the OS... but...

    If you're using Active Directory for authentication, you'll need a license for exposing AD to the internet.

    If you're using SQL Server Express for storing the data (limited to 2 GB) there is no cost to the database side, but if you're using any other non-free version of SQL Server, there's an internet connector license involved there too.

    FOR THE BEST ADVICE ON LICENSING, PLEASE CONSULT YOUR MICROSOFT REP.

    As for the login you referred to, if you are using AD, in the very least, the landing page should be anonymous.  From there users can click the "Login" link in the top right and be challenged for credentials at that time.  *See my blog as a good example of this. (http://www.cjvandyk.com/blog)

    By having the home page be anonymous, you have the ability to communicate information to users without requiring them to authenticate, such as information about your company etc.  Of cours, if you choose to not have anything anonymous, you can do so too.  My root site at http://www.cjvandyk.com is like that.

    So in answer to the last question you asked, NO, you do not need a seperate AD environment, BUT it is best practice to create a seperate domain forest for your internet facing servers that has Trust configured with the internat AD forest.  The DMZ forest (internet zone) trusts the internal forest, but not vice versa.  That way, users can authenticate with their internal credentials, but you can create other accounts, such as client accounts, in the DMZ forest and not endanger internal security. :-)

     

     


    I trust that answers your question...

    Thanks
    C

    http://www.cjvandyk.com/blog
    • Marked as answer by Seven M Friday, May 14, 2010 9:51 AM
    Tuesday, May 04, 2010 1:26 PM
    Answerer

All replies

  • If your OS is licensed, then WSS doesn't have a cost associated with it.  It's a FREE add-on to the OS... but...

    If you're using Active Directory for authentication, you'll need a license for exposing AD to the internet.

    If you're using SQL Server Express for storing the data (limited to 2 GB) there is no cost to the database side, but if you're using any other non-free version of SQL Server, there's an internet connector license involved there too.

    FOR THE BEST ADVICE ON LICENSING, PLEASE CONSULT YOUR MICROSOFT REP.

    As for the login you referred to, if you are using AD, in the very least, the landing page should be anonymous.  From there users can click the "Login" link in the top right and be challenged for credentials at that time.  *See my blog as a good example of this. (http://www.cjvandyk.com/blog)

    By having the home page be anonymous, you have the ability to communicate information to users without requiring them to authenticate, such as information about your company etc.  Of cours, if you choose to not have anything anonymous, you can do so too.  My root site at http://www.cjvandyk.com is like that.

    So in answer to the last question you asked, NO, you do not need a seperate AD environment, BUT it is best practice to create a seperate domain forest for your internet facing servers that has Trust configured with the internat AD forest.  The DMZ forest (internet zone) trusts the internal forest, but not vice versa.  That way, users can authenticate with their internal credentials, but you can create other accounts, such as client accounts, in the DMZ forest and not endanger internal security. :-)

     

     


    I trust that answers your question...

    Thanks
    C

    http://www.cjvandyk.com/blog
    • Marked as answer by Seven M Friday, May 14, 2010 9:51 AM
    Tuesday, May 04, 2010 1:26 PM
    Answerer
  • you can also use forms authentication for your site to login from internet

    see this link for more steps ::

    http://www.simple-talk.com/dotnet/windows-forms/configuring-forms-authentication-in-sharepoint-2007/

    Tuesday, May 04, 2010 3:23 PM