How to give access to certain folders to an external user in a domain?

Question

System administration

1) Domain controller control for wines 2003r2.
2) There is a Ds02 server for wines 2012r2, in which information and a consultant program are stored.
3) There is a Term remote desktop server.
4) This situation was asked to give access to the consultant folder, which is located on the ds02 server, the fact is that
this user who wants to use the consultant is not a member of the control domain. I don’t want to add it to the domain, for the sake of security... The properties of all folders indicate access to all members of the domain... I want to give him access only to the consultant folder and that’s all..... How can I implement this correctly, can you tell me?

Answer 1

You can create a local user on both servers (Term and DS02) with the same username and password.
Give this user permissions to access the folder on DS02 + rights to remote connection on Term.
Let in an external employee under these credentials.

Answer 2

We do it in 2 ways, it all depends on the situation.
1) We create an account in the domain, with our own group and restrictions.
2) We use NextCloud. This is a separate server that can connect to a smb ball and send it via the WEB. User in NextCloud can be domain, local or social (gmail).
The second option is our priority, because. excludes the guest from connecting to the local network.