IIS and MS sql server on the same machine

Hi All,

I need to design architecture on a file handling application through web interface.

there will be limited no of users, and some DB logging will be there. so that database is not too complex.

Is it ok, if i have database server and IIS on the same machine, and having a file server separately ( i am talking of the physical machines).

Please provide your expert views on the same.

Depending on the application, it is good to seperate the web & DB machines for security purposes. Preferably having a firewall between the two. This is because, if someone penetrates your webserver, they still have to penetrate another server before getting access to your data. Hopefully in this time the attack would be detected and stopped.

Again, this depends on what the database will hold, if its just file locations etc, that are available anyway, as long as the box is hardened well (and up to spec) you could have them both on the same box (personally i wouldnt but thats a cost/risk assessment decision).

Displeaser

It's not a problem to have IIS and MSSQL on the same computer as long as you have enough horsepower to handle the load. MS Small Business Server is sold with this configuration.