This message was deleted.

At all my customer sites I have a dedicated store for external fas use. 1. u Must kill the domain out of the auth. in this store for fas ( when not he double the domain Manuel@deyda.net@deyda.net and so on 2. All connections in this store are cert auth. No passthrough auth with Kerberos and so on -> therefore no prt in Hybrid joined scenario at the moment.

No harm no foul in sharing a store - but I much prefer separating stores for workloads - external, internal, pass through etc… be warned that all double hop scenarios need FAS enabled on the next hop store