I have a scanner connected to a computer in Domain A that places files into a shared folder on my web server. The web server is in the DMZ and is a stand alone server (no Domain). I have the shared folder on the web server mapped to a drive on the computer in domain A - to make this work I have to use the Domain A administrator credentials, which means that when my scanner operator user logs in, I have to reconnect the shared folder using Admin credentials. I don't want to make the user in Domain A a member of the Domain A Administrative group.
What I would like to do is make the user in Domain A a user on the Web server so that they have permission to access the shared drive. Since the Web Server is not part of a domain, I don't have the option of using local groups on each machine. Do I need to create another domain just for the web server or is there another way? I would also prefer not to make the user in Domain A a member of the Admin users on the Web Server. Web Server and Domain A controller are both running Server 2008 R2. Sorry about the long preamble, but I figured explaining what I am trying to achieve will be better than just asking how to make a user in one domain a user on the web server. Thanks.