Hi,

We are setting up CMS on a W2003 NLB cluster. Both CMS nodes are pointing to
the same database. One node is read only and one node is read/write. I have
few questions about the setup:

- First: Is there MS documentation (with best practises) available on how to
set up a CMS NLB cluster?
- I've read that it is not wise to use the iusr account as the cms guest
user. In a two node setup one just cannot use the iusr account since it is a
local user. So I want to create a domain guest user. This user will be a
member of the domain users groep and hence also the local users group. Are
there any security risks in using a domain account as the guest user within
CMS?
- Is it possible to make both nodes read/write? I've tried it, but a lot of
locked object messages appear.

regards,

Frank

[ Post a follow-up to this message ]

Hi Frank,

1) the only documentation I'm aware of for this is in the AC whitepaper:
http://www.microsoft.com/technet/tr...oy/cmsdes01.asp

2) you could also use local machine accounts for this:
http://support.microsoft.com/?id=810308

Cheers,
Stefan.

"ROS" <ROS@discussions.microsoft.com> wrote in message
news:12C338B2-4DEA-4852-AB8C-2D2FFAC4EFEF@microsoft.com...
> Hi,
>
> We are setting up CMS on a W2003 NLB cluster. Both CMS nodes are pointing
to
> the same database. One node is read only and one node is read/write. I
have
> few questions about the setup:
>
> - First: Is there MS documentation (with best practises) available on how
to
> set up a CMS NLB cluster?
> - I've read that it is not wise to use the iusr account as the cms guest
> user. In a two node setup one just cannot use the iusr account since it is
a
> local user. So I want to create a domain guest user. This user will be a
> member of the domain users groep and hence also the local users group. Are
> there any security risks in using a domain account as the guest user
within
> CMS?
> - Is it possible to make both nodes read/write? I've tried it, but a lot
of
> locked object messages appear.
>
> regards,
>
> Frank

[ Post a follow-up to this message ]