Windows Server 2003
Windows Server 2003

SUS on domain controller?

I'm looking for some opinions on my dilema...

I have a small network of about 40 computers that are on an active directory domain (windows server 2003). I really want to use SUS to more easily manage patches, but I'm cringing at the fact of having to install IIS on a domain controller even if it is locked down. Our domain controller is the only server we have.

Buying complex patch management software or another server to run SUS just does not seem like an option for such a small network.

What would you all do in this situation?

LVL 18

luv2smileAsked: 2004-10-13

Who is Participating?

LVL 12

valiconCommented: 2004-10-13

I wouldn't really place SUS on a DC. I am not concerned about security and IIS as SUS really locks down an already tighten IIS server. I just think that it's best to leave DC's to do the job of DC's. Here is a great site for SUS:

http://www.susserver.com

Hope this helps :)

LVL 6

nihlcatCommented: 2004-10-13

Agreed, don't dicker with your DC. I run SUS on a Pentium 4 Desktop running W2K Server with an 80 GB hard disk for 120 stations...works fine! IIS doesn't really require much to run, just make sure you have a large hard disk to hold the updates.

gauthiervCommented: 2004-10-13

I agree with nihlcat. For your small network, a desktop would suffice as long as you have enough disk space to hold all the updates.

LVL 34

Dave_DietzCommented: 2004-10-13

IIS 6.0 is very secure to begin with and the SUS installation locks it down even tighter.

If budget is a serious issue I don't see any problem with installing IIS and SUS on your Domain Controller.

If you can spare a few hundred dollars for a dedicated machine I would agree with the previous answers to this question.

Dave Dietz