RE: Domain Controller Best Practice
From: John Fellers (john.fellers_at_insightbb.com)
Date: 02/23/05
- Previous message: Depp, Dennis M.: "RE: Domain Controller Best Practice"
- In reply to: Sullivan Tim P: "Domain Controller Best Practice"
- Next in thread: Miroslaw Slawek Chorazy: "RE: Domain Controller Best Practice"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "Focus-Ms@Securityfocus. Com (E-mail)" <focus-ms@securityfocus.com> Date: Tue, 22 Feb 2005 19:16:09 -0800
Actually if you check on microsofts technet website for whatever version
server you are working with,they have tons of "best practice" papers and
technical documentation. I am sure you would be able to find something if
you do a search in the technet articles. Best Regards.
John Fellers
-----Original Message-----
From: Sullivan Tim P [mailto:tim.sullivan@nativemode.com]
Sent: Monday, February 21, 2005 5:22 PM
To: focus-ms@securityfocus.com
Subject: Domain Controller Best Practice
I am in need of some supporting documentation relating to Domain
Controllers.
The situation is this. A medium sized school would like their single DC
to also be a file server. This DC would be serving about 300 people,
along with another file server and an email server.
My initial recommendation is multiple domain controllers for the simple
reason of fault tolerance of the schema. They buy this.
However, they would like to see technical documentation saying that it
is not a good idea to have a domain controller share roles as a DC and a
file server.
One of my main concerns, aside from load, is that high school age kids
are using the network. They like to poke and prod. I would rather them
not even poke at the DC. Also, as the DC has no local security database,
you can no longer use permission assignment best practice. To me it just
seems like a bad idea, but I need documentation to back it up.
Can anyone offer resources to illustrate this? I am scouring technet and
the MS AD deployment docs now.
Thanks,
Tim
______________________
Tim Sullivan
Nativemode Technologies
(623) 910-4700
tim@nativemode.com
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: Depp, Dennis M.: "RE: Domain Controller Best Practice"
- In reply to: Sullivan Tim P: "Domain Controller Best Practice"
- Next in thread: Miroslaw Slawek Chorazy: "RE: Domain Controller Best Practice"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|