Off the top of my head, I might recommend searching the phrases "physical security" and "domain controller" on the microsoft site.
The first hit returned on such a search is http://technet2.microsoft.com/WindowsServer/en/Library/05db0f72-0e18-453b-b294-49cfc8f9d6d21033.mspx?mfr=true, which includes the phrase "In addition, ensure the physical security of domain controllers in hub locations so that unauthorized personnel cannot access them. Do not place domain controllers in a location in which you cannot guarantee the physical security of the domain controller." And that was just the first hit on the results page. On 6/28/06, Larry Wahlers <[EMAIL PROTECTED]> wrote:
I am being asked to install a single server in a remote location (about 20 miles from here, 20 users) that will be a DC for our entire network, running DHCP and DNS, acting as a file server and print server for this remote location. And, this server will be in an unlocked rack in a semi-public area where literally anyone could gain physical access to the box. At the very least, the 20 employees will be walking past it every day. There are many red flags about this scenario. I can think of a few. But, what I need is documentation from an *external* source that tells management just how bad an idea this is. After all, they won't believe me, but they might believe an "expert." At the very least, I would want the rack in which this server is placed to be locked 24/7. Better would be a locked room. All help welcomed with many thanks. -- Larry Wahlers Concordia Technologies The Lutheran Church - Missouri Synod mailto:[EMAIL PROTECTED] direct office line: (314) 996-1876 List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
-- ----------------------- Laura E. Hunter Microsoft MVP - Windows Server Networking Author: _Active Directory Consultant's Field Guide_ (http://tinyurl.com/7f8ll) List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
