Hi Folks, My company currently has a Win2k Network Setup. This network consist of Isa Server, Exchange Server, Internal Web Server, and a few Storage and App server. We are in the process of building a new seperate network. We want to create this network so that we can connect to the existing network and use it's resources. At the same time the existing network will not be able to access the new network. This network will be a win2k3 network with Exchange2000, Isa2000, SQL2000 and a Web Server. My question is which is the best possible way to set this network up in a way where we will have the most possible security and the most possible performance. For example: where should we place the servers? should the exchange server be in the DMZ or in the internal network. Should SQL Server be in the DMZ or the inside. Keep in mind that the webserver will be accessing the SQL Server. Where do we put the webserver? We also plan to use the webserver to host not only corporate sites but client's sites. Just looking for some gerneral ideas and reasons why you would set it up like this. Thanks D

here's a good document for your trust relationship/security/access issues. http://www.microsoft.com/technet/community/columns/profwin/pw0303.mspx as far as exchange is concerned. keep it inside the dmz however if you are going to use OWA, build a seperate box and put that one with OWA in the dmz. domain, forest, & site considerations are the most important to consider BEFORE setting up the new server. exchange 2003 requires active directory also. keep in mind your replication issues if the exchange servers on not on the same lan. depending on your situation, you could make it a single forest (easiest) or you could make a resource forest for exchange server and hosting mailboxes while user accounts are in seperate forests. here is a good link for your exchange issues: http://www.microsoft.com/downloads/details.aspx?familyid=9fc3260f-787c-4567-bb71-908b8f2b980d&displaylang=en download the file. it is a word document. will explain what you need to get the exchange server going properly. good luck.