Bill,
Yeah we have that scenario. 1- Absolutely use the domain\username and do
not allow project server validation. We only have about 40 projects with
about 100 users so it wasn't a big deal. Although if I were to go back and
do it all over I would not have joined the computer to our domain. I would
have left the computer as just a member server (to take a 2k wording). That
way the machine\user accnt would ONLY work on that server if (now adays when
if someone seriously wants you) vs the entire domain.
Its a 1 box setup. 2k3, proj 2k3 wss and sql 2k (sp3).
For simplicities sake for the interior office users we connect to
http:\\servername\projectserver vs http:\\dotted.machine.name\projectserver
when making the project pro 2k3 project server login . If you do it this
way then never tell the PM's the \\machine name cause they will not know the
reasoning why they cannot connect to the projectserver OUTSIDE the office

.
Hope this helps
oh and with project 2k you had to do somethign with permission in iis on
mdac, I don't think we had to in 2k3. Might ask the group or see if it's
been posted.
R