Designing a Microsoft SharePoint 2010 Infrastructure Vol 1 part 34. This course is intended for IT Professionals who use Microsoft SharePoint 2010 in a team-based, medium-sized to large environment. While they may have implemented a SharePoint deployment, they have limited experience in designing a SharePoint infrastructure. They likely work as a senior administrator who acts as a technical lead over a team of administrators. Members of this audience should have at least 6 months experience with SharePoint 2010. | Planning Authentication 6-33 directly through the intranet. When the new zones have been added you can configure separate authentication methods. In this case the default zone is the zone that internal employees use and the Internet zone is configured for partner access. The Internet zone uses forms-based authentication to authenticate partners against the alternate identity management system. MCT USE ONLY. STUDENT USE PROHIBITED 6-34 Designing a Microsoft SharePoint 2010 Infrastructure Planning Authentication for Farm Zones Guidelines for planning authentication for farm zones Configure the Default zone as the most secure zone The Default zone will handle any request not identified as belonging to a specific zone Configure the minimum number of zones for each Web application Minimize the exposure of the Web application by minimizing the number of zones Configure NTLM for search For content to be included in search results at least one zone must use NTLM Key Points If you plan to implement more than one authentication method for a Web application by using zones use the following guidelines Use the Default zone to implement your most secure authentication settings. If a request cannot be associated with a specific zone the authentication settings and other security policies of the Default zone are applied. The Default zone is the zone that is created when you initially create a Web application. Typically the most secure authentication settings are designed for end-user access. Consequently end users are likely to access the Default zone. Use the minimum number of zones that the application requires. Each zone is associated with a new IIS site and domain for accessing the Web application. Only add new access points when these are required. If you want content in the Web application to be included in search results ensure that at least one zone is configured to use NTLM authentication. The index component requires NTLM authentication to crawl content. Do not create a
