Terminal Server on a Domain Controller???

Posted on 2005-02-25
Medium Priority
Last Modified: 2010-04-19
I would like to know what should be taken into consideration when implementing a Terminal Server on a Domain Controller.  I would like to know if this is not recommended and if there are any security issues I should be aware of.  If anyone has had any experience with this, please shoot your info my way!  Thanks EE!

Question by:LarrySND
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
LVL 16

Expert Comment

ID: 13403147
Terminal Services is not recommended on a Domain Controller by Microsoft.  TS Clients must be given log on locally rights to the box.  Also, a buggy application could bring the DC to it's knees.  I have just been facing this exact issue at one of my remote sites.  

LVL 16

Accepted Solution

samccarthy earned 400 total points
ID: 13403308
Here is a little more information I came across

Remember the server's other roles and physical security. For many organizations, terminal servers should be member servers providing only Terminal Services functions. For instance, installing Terminal Services on a domain controller will weaken Active Directory domain security. Also, these servers should be located in a locked room or datacenter to protect from unauthorized users gaining physical access to the server.

Install Terminal Services as a stand-alone server and not as a domain controller.
Installing Terminal Services as a domain controller can affect the performance of the server because of the additional memory, network traffic, and processor time required to perform the tasks of a domain controller in a domain.


Featured Post

On Demand Webinar: Networking for the Cloud Era

Ready to improve network connectivity? Watch this webinar to learn how SD-WANs and a one-click instant connect tool can boost provisions, deployment, and management of your cloud connection.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question