I was just about to say the same thing; DC's are much easier to compromise with "extra" services and features loaded up on them.
As Scotty would say, "Aye sir, the more they overtake the plumbing, the easier it is to stop up the drain." Jason -----Original Message----- From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 1:28 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Other application/uses on DC's. Was: OT: Exchange 2000 Common sense tidbit #1: Security... A DC contains the keys to the kingdom, and reducing the applications running on a DC reduces the surface area exposed to attack. -gil -----Original Message----- From: Neceda,Thomas W - LGCRP [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 1:20 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Other application/uses on DC's. Was: OT: Exchange 2000 That's how I feel, however, I've recently been asked about having the DC's perform other uses, such as data storage (basically an I/O box for transfering data while staging client systems). Does anyone have any real-world examples of why this should not be done? Pointers to any documenation anywhere? Common sense tid-bits? I've given my two cents about the issue, but perhaps I'm just being too sensitive to the importance of just having a DC do DC work. Thanks in advance. twn -----Original Message----- From: Craig Cerino [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 21, 2003 11:28 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [ActiveDir] OT: Exchange 2000 First of all - out of personal preference - -I would NOT put Exch on a DC in AD. Just my preference - but I wouldn't do it. Too much going on --- on both the DC and on the mail server .+-wȆi0g-튺+Yb塲mPiâ´0â¥-튺+b᧲ڪf.+-j!硶 0j!é°Šor潩yØ«IV+v* List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
