Domain Controller Best Practice

From: Sullivan Tim P (tim.sullivan_at_nativemode.com)
Date: 02/22/05

  • Next message: Depp, Dennis M.: "RE: Domain Controller Best Practice" 
    Date: Mon, 21 Feb 2005 18:21:42 -0700
To: <focus-ms@securityfocus.com>

    I am in need of some supporting documentation relating to Domain
    Controllers.

    The situation is this. A medium sized school would like their single DC
    to also be a file server. This DC would be serving about 300 people,
    along with another file server and an email server.

    My initial recommendation is multiple domain controllers for the simple
    reason of fault tolerance of the schema. They buy this.

    However, they would like to see technical documentation saying that it
    is not a good idea to have a domain controller share roles as a DC and a
    file server.

    One of my main concerns, aside from load, is that high school age kids
    are using the network. They like to poke and prod. I would rather them
    not even poke at the DC. Also, as the DC has no local security database,
    you can no longer use permission assignment best practice. To me it just
    seems like a bad idea, but I need documentation to back it up.

    Can anyone offer resources to illustrate this? I am scouring technet and
    the MS AD deployment docs now.

    Thanks,
    Tim

     

    ______________________
    Tim Sullivan
    Nativemode Technologies
    (623) 910-4700
    tim@nativemode.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Depp, Dennis M.: "RE: Domain Controller Best Practice"

    Relevant Pages

    • RE: File Sharing in 5.0
      ... You don't want the remote admin UI to prompt you to set the device's name ... I answered another post just last month called "File Server on ... Note that under the AdapterList documentation it mentions that "*" can used ... to serve on all adapters. ...
      (microsoft.public.windowsce.platbuilder)
    • Re: File Server Migration Toolkit - relocating shares correction
      ... "If a file is deleted on the source file server, ... this version WILL migrate shares and permissions. ... For example, the documentation refers to ...
      (microsoft.public.windows.server.migration)
    • Re: Thinking about a linux server
      ... The file server is ... Whats better Fedora or Ubuntu as the OS for such a server? ... The reason for the choice between those two is the documentation. ... But I see no overriding reason to select one over the other. ...
      (alt.os.linux)
    • Migrating NT PDC to AD Domain
      ... the Exchange server. ... The file server is our BDC. ... find seems to cover an in-place migration, which isn't applicable to what we ... Any pointers or documentation that covers this situation ...
      (microsoft.public.windows.server.migration)