Hello all, I have a lot of public resources [ WEB Servers , Edugate , Library , ETC ... ] also i have DMZ network implemented Design all servers currently placed on it they suggested here to join the work group server to the domain i know it's not recommended also there is no need to any authentication level just public resource i need documentation i this topic with the best practice.

Depends on the security policies of your company but still Its generally is not a good idea to have an internet facing web server be part of your parent forest (usually where corporate / users are located). This is the best option when you are looking to take advantage of existing user / service accounts, backup systems, monitoring and management systems. If someone gets a hold of the box, it's a member server in your parent forest. Less security, easier to manage. More cost effective.. for more information on the web server related security please seek assistance here http://forums.iis.net http://www.arabitpro.com

thanks syed very much . . . . . is there written topic in Microsoft . . . .