Extend Web applications to support access by extranet users

This Office product will reach end of support on October 10, 2017. To stay supported, you will need to upgrade. For more information, see , Resources to help you upgrade your Office 2007 servers and clients.


Topic Last Modified: 2016-11-14

To create an extranet site for Microsoft Office Project Web Access external users, you must extend the Web application of the Office Project Web Access site whose content you want to expose to your extranet users. This creates an extranet zone through which the Office Project Web Access data will be available to your external users.


This procedure requires you to have created a Project Web Access instance available to your organization's internal users. For more information, see Deploy Project Server 2007 to a server farm environment.

Extending a Web application for a Project Server 2007 extranet

If you have Office Project Web Access users who access the data internally through the intranet, you can decide to expose the same data to a different set of users who are accessing it using different domains (for example, an extranet environment). To do this, you must extend the existing Web application for the Office Project Web Access site to another Internet Information Services (IIS) Web site. This option reuses the content database for the existing Web application.

To extend an existing Web application

  1. In the SharePoint Central Administration Web site, on the Application Management page, in the SharePoint Web Application Management section, click Create or extend Web application.

  2. On the Create or Extend Web Application page, in the Adding a SharePoint Web Application section, click Extend an existing Web application.

  3. On the Extend Web Application to Another IIS Web Site page, in the Web Application section, click the Web application link, and then click Change Web application.

  4. On the Select Web Application page, click the Web application that you want to extend. This would be the Web application that is hosting the Project Web Access site.

  5. On the Extend Web Application to Another IIS Web Site page, in the IIS Web Site section, select Create a new IIS Web site. In the Port box, enter the port number that you want to use for your extranet site (for example, 80). The Description and Path boxes are populated based on the port number that you entered.

  6. In the Security Configuration section, configure authentication and encryption for the extended Web application.

    1. In the Authentication Provider section, select either Negotiate(Kerberos) or NTLM.


      In most cases, you should use the default setting (NTLM). Use Negotiate (Kerberos) only if Kerberos authentication is supported in your environment. The Negotiate (Kerberos) option requires you to configure a Service Principal Name for the domain user account. To do this, you must be a member of the Domain Administrators group. For more information about how to configure Kerberos authentication, see Microsoft Knowledge Base article KB 832769: HOW TO: Configure Windows SharePoint Services to Use Kerberos Authentication.

    2. In the Allow Anonymous section, select No.

    3. In the Use Secure Sockets Layer (SSL) section, select Yes or No. We highly recommended using SSL for an extranet site. If you decide to enable SSL for the Web site, you must configure SSL by requesting and installing an SSL certificate.

    4. For more information about how to configure SSL for Office Project Server 2007, see "Configure the Secure Sockets Layer (SSL) Protocol for a Project Server 2007 extranet environment." This article is currently being written and will be available at a later date.

  7. In the Load Balanced URL section, type the URL for the domain name for all sites that users will access in this Web application. This URL domain will be used in all links shown on pages within the Web application. By default, the text box is populated with the current server name and port.

  8. In the Load Balanced URL section, in the Zone section, specify the zone for the extended Web application from the drop-down menu. Select Extranet.

  9. Click OK to extend the Web application, or click Cancel to cancel the process and return to the Application Management page.

You can confirm that the new extranet zone was created by viewing the zones that have been created for your farm on the Alternate Access Mappings page on the Central Administration site.