Workgroup server authenticate external AD account

[stephnane]

Hello.

For security and infrastructure reasons, I got a server which has to stay in a "workgroup" domain, not integrated in an active directory. 

Meanwhile, I have a list of 15 users of my Active Directory who have to log on this server through TSE/RDP Cals.

Is there any way for a server not in my AD to authenticate "external" (from another AD) users and to open a session on the server ?

Thank you.

[#2]

If you put this server in workgroup for security reasons, do not try to authenticate using Active Directory - it would defeat the purpose of isolating your server, and you'll need to decrease the security of the whole forest for that (not counting security issues with logged on accounts).
Use local accounts instead.
But you mention users from your Active Directory, then users from another Active Directory, that's confusing. What are you trying to accomplish there ?

[#3]

@Alban1999 Thanks for your reply. Forget the security reasons, this is not a good reason. 

- Let's name my active directory "stephAD".

- My server is hosted in a datacenter we can't manage. And our "hosting partner" don't autorize us to integrate the server in an Active Directory Domain.

- On this server, there is an application and some users have to log on the server to launch a local tool to manage the application.

- We plan to install some RDP CALs to support multiple simultaneous connections. 

- Is this possible for the server to autorize connections for users from our active directory domain 'stephAD' ?

Thanks you.

[#4]

Do someone have any idea ?
Thanks to all 🙂