From: "Robert Comer" 

As long as both are internal I have no problem with it. Assuming the server
has enough hardware (RAM, disk, CPU performance) to do the job.

- Bob Comer


"Ellen K."  wrote in message
news:uf6b11hv51au96lg28a7svf9gm36rots2b{at}4ax.com...
> At work they want to make a web app with a SQL Server back end.  It
> would only be used over our intranet, which in the minds of certain
> people means there is no security risk.    I don't like the idea of IIS
> and SQL Server on the same box, even if it's only internal...  If I'm
> wrong, please beat me up, but if I'm not wrong, please help me out with
> some specific ammunition.
>
> We have another one running but the webserver is on a different box from
> the databases the app talks to, and all the users show up as the same
> Windows user to SQL Server, i.e. they all look like the user the
> webserver is running under.

--- BBBS/NT v4.01 Flag-5