Sure, that's what I'm doing currently (I remove all the services except for authentication). However as normalisation is used internally even when the normalisation service isn't active, the schema problem has to be solved anyway.
However, ultimately I could imagine a single AD instance supporting both proxy partitions and a JDBM partition which tends to suggest the interceptor chain may ultimately need to be associated with the partition rather then the root nexus.
