Hi Larry,
You might want to check this reference which was posted to this
group a few days ago:
http://iase.disa.mil/stigs/checklist/AD_Checklist_V1R11_20060607.pdf
It discusses physical security and not running other services on DCs,
among other things.
Mike Thommes
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Larry Wahlers
Sent: Wednesday, June 28, 2006 10:14 AM
To: [email protected]
Subject: RE: [ActiveDir] Ammunition, please!
On a lesser note, is there any problem with having a DC also be their
file server and print server? Again, we're only talking 20 people here.
Assuming I can at least get the server rack locked, and I put the file
shares on a separate partition (i.e., not on the C drive, of course).
This is all good. I think I have enough ammunition to, at least, cover
myself if management decides to go ahead and put a DC in that location.
The reason is, of course, this group of 20 folks have no money, so we'll
have to buy them a server out of our own budget, because they are one of
our supported clients and we have no choice. In my opinion, however, we
*do* have a choice as to whether we allow a DC to be in a physically
non-secure location.
--
Larry Wahlers
Concordia Technologies
The Lutheran Church - Missouri Synod
mailto:[EMAIL PROTECTED]
direct office line: (314) 996-1876
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx