Does an Active Directory need to have only AD domain controllers?
Expert Laura E. Hunter explains to a reader why it is preferred to have an Active Directory with AD domain controllers.
While it's not a hard-and-fast rule, most AD administrators will tell you that a domain controller should not run other applications. Since your domain controllers are the "keys" to your network "kingdom", you should do your best to isolate them from attack. By adding additional applications to run on a DC, you are increasing the number of ways that a malicious user can attack that DC. Depending on the size of your network, having dedicated domain controllers may also improve performance in terms of user authentication, logon times, etc.
Dig Deeper on Windows systems and network management
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.
Meet all of our Windows Server experts
View all Windows Server questions and answers
Start the conversation
0 comments