Best Practices

• Use Microsoft Identity Integration Server for identity management and the provisioning of accounts.

• Be cautious when upgrading the AD schema to support MSDSS with Services for NetWare.

• Be aware of the differences between NetWare file permissions and NTFS security permissions, and how the File Migration Utility will compensate for those differences.

• Use Active Directory Federation Services (ADFS) to manage single sign-on web-based applications across multiple AD forests and ADAM implementations.

• Use the free Identity Integration Feature Pack when you only need to synchronize between AD forests.

• Only install Server for NIS if the Windows Server is not subservient to any Unix NIS servers.

• Use the Subsystem for Unix-based Applications to replace legacy Unix scripts and run them in a native Windows environment.

• Install Server for NIS only on an Active Directory domain controller to enable domain-level authentication from NIS to AD.

• Install the Client for NFS and Gateway for NFS components on different systems.

• Install the Server for NIS Authentication component on all domain controllers in the domain in which security credentials will be used.