That's what I asked the licensing specialist from MS this morning...FWIW, his answer was that you DID need CALs to hit the DC from the web. Basically any function a non-web edition server provides needs a CAL. Getting an ECL will solve that problem, as it covers all additional servers those external users would be hitting (SQL, DC, etc.)
- Andy O. >-----Original Message----- >From: Ben Scott [mailto:[EMAIL PROTECTED] >Sent: Friday, May 16, 2008 3:27 PM >To: NT System Admin Issues >Subject: Re: Client licenses for web apps (was: AD in the DMZ) > >On Fri, May 16, 2008 at 4:21 PM, Joe Heaton <[EMAIL PROTECTED]> wrote: >> Now I'm kinda confused on how having that makes >> it so I don't need user CALs for authentication. Wouldn't the >> authentication still go back and hit the DC? > > Hmmm. Good point. This isn't clear from any of the license >documentation I can find. It says you don't need a client license for >web access to Web Server Edition, but I don't know if that includes >pass-through authentication against a DC. One could argue that you're >using the Web Server Edition computer as a "Multiplexing Service" for >the Domain Controller computer, which would mean you would again be >back to needing client licenses for everybody. Anyone have any >official word from Microsoft on this aspect? .sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
