[ActiveDir] Any SFU users out there?

[Alex Fontana]

Our main file/print server was set up to run the SFU NFS server and is a Domain Controller.  Having this box as a DC has been stressing me out since I got here since anyone who creates home directories and needs to modify permissions (standard practice when creating new users) needs to have local admin access to the file server.  Well, obviously since it’s a DC that means local admin to the domain.  My first thought is, “Demote it”, then there’s that other layer of complexity…the NFS server.  Does anyone know if there is any link in the NFS Server to the box being a DC?  I’ll be setting up a test env, but thought I’d give the list a shot first….   TIA   -Alex