Currently we have a sharepoint 2007 site collection that has many sub site. The sub sites included our Business site, Customer site, and other internal team and department sites. Our sharepoint can be accessed internally and externally. The Customer site also has multiple sub sites and can be accessed by our customer externally. Our business management now wants us to fine possible options or best solution to isolate the Business site from the Customer site because it has sensitive and cost information that we want to make sure it is secure. Should we put the Business site on a separate server or separate drive? Or should we create another site on the same sever? But would it be secure enough? We want the Business information to limit to business owners only so that it is impossible for any non business users to access it. How about tighten the security by using digital certificate for Customer users? Will it help? Is it simple enough to implement? If possible, we would like both sites to use the same Domain name (ex: CompanyName.com)

Hi OSFX, Can you confirm if this is for 2007 or for 2010. If it's for the latter there are many powerful options available to you such as: host header site collections (vanity domains) claims based authentication site subscriptions & feature sets So with 2010, you could create a unique domain for each customer (customerA.CompanyName.com, customerZ.CompanyName.com). They could use claims based authentication so users could potentially logon with thier own credentials but certianly not with your local AD credentials and finally, via site subscriptions you can control exactly what functions these clients can access. Whatever version you are referring to you certainly want to look to use seperate site collections at least for internal and external data and probably assign these site collections to seperate content databases. It's a big big topic but hopefully this gives you something to think about... check out my blog for some a little info on subsriptions: http://sharepintblog.com/?s=subscriptions Brian C | SharePint Blog

Hi Brian, It is for 2007. Sorry, I know this forum is for 2010, but I don't know where else to post for 2007. So you are suggesting us to use seperate site collections? And is it secure enough to block the sensitive information from the other users?

I agree and I would add if you want data seperated I would create the new site collection in a seperate content database. If you add a new one to the web app, SharePoint will automaticly add the new site collection to the empty content database. TechNet post on adding databases to SharePoint 2007. http://technet.microsoft.com/en-us/library/cc825326(office.12).aspx Good luck, Gary blog www.sharepoint2010now.comGary Newman MCSE, MCT, CCNA MCDBA, MCAD, MCSA MCTS SharePoint 2007 Dev & Admin MCPD SharePoint 2010 Development My Blog www.sharepoint2010now.com