Should the IAS server be part of the domain or not?

[slyride]

Hello,
As far as security is concerned, is it better to have the the IAS server be part of the domain and authenticated users using their domain account, or to leave the IAS server as a standalone and have users authenticate to the local users on the IAS server?
TIA
Leon

 

[lgarner]

I suppose I'd say that separation is generally better for security, but it has to be weighed against the added overhead for both administrators and users, of maintaining multiple accounts & passwords. I'd integrate IAS into the Windows domain, personally.