• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 298
  • Last Modified:

Terminal Server on a Domain Controller???

I would like to know what should be taken into consideration when implementing a Terminal Server on a Domain Controller.  I would like to know if this is not recommended and if there are any security issues I should be aware of.  If anyone has had any experience with this, please shoot your info my way!  Thanks EE!

Larz
0
LarrySND
Asked:
LarrySND
  • 2
1 Solution
 
Steve McCarthy, MCSE, MCSA, MCP x8, Network+, i-Net+, A+, CIWA, CCNA, FDLE FCIC, HIPAA Security OfficerIT Consultant, Network Engineer, Windows Network Administrator, VMware AdministratorCommented:
Terminal Services is not recommended on a Domain Controller by Microsoft.  TS Clients must be given log on locally rights to the box.  Also, a buggy application could bring the DC to it's knees.  I have just been facing this exact issue at one of my remote sites.  

0
 
Steve McCarthy, MCSE, MCSA, MCP x8, Network+, i-Net+, A+, CIWA, CCNA, FDLE FCIC, HIPAA Security OfficerIT Consultant, Network Engineer, Windows Network Administrator, VMware AdministratorCommented:
Here is a little more information I came across

Remember the server's other roles and physical security. For many organizations, terminal servers should be member servers providing only Terminal Services functions. For instance, installing Terminal Services on a domain controller will weaken Active Directory domain security. Also, these servers should be located in a locked room or datacenter to protect from unauthorized users gaining physical access to the server.

Install Terminal Services as a stand-alone server and not as a domain controller.
Installing Terminal Services as a domain controller can affect the performance of the server because of the additional memory, network traffic, and processor time required to perform the tasks of a domain controller in a domain.

0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now