<div>
A perfect answer Oleksiy.<br />
One thing puzzles me handy: why do you say 'A DC would provide better security'? I just can't grasp what you mean with that so I could overlook something essential in your question.<br />
<br />
J.
</div>


<div>
<div class="content wysiwyg-content">
Regarding the DNS servers in the DMZ. &nbsp;Generally is it best not use Active Directory (domain controller) for the DNS server in the DMZ and leave it as a workgroup. &nbsp;Employees that troubleshoot this DMZ would have to go outside the firewall and use a public IP.<br />
<br />
There may be one or two DNS servers that hold the zones used by the public.<br />
A DC would provide better security but is it necessary? &nbsp; 
</div>
</div>


Regarding the DNS servers in the DMZ.  Generally is it best not use Active Directory (domain controller) for the DNS server in the DMZ and leave it as a workgroup.  Employees that troubleshoot this DMZ would have to go outside the firewall and use a public IP.

There may be one or two DNS servers that hold the zones used by the public.
A DC would provide better security but is it necessary?   

A perfect answer Oleksiy.
One thing puzzles me handy: why do you say &#39;A DC would provide better security&#39;? I just can&#39;t grasp what you mean with that so I could overlook something essential in your question.

J.

DNS server security in a DMZ

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

Networking is the process of connecting computing devices, peripherals and terminals together through a system that uses wiring, cabling or radio waves that enable their users to communicate, share information and interact over distances. Often associated are issues regarding operating systems, hardware and equipment, cloud and virtual networking, protocols, architecture, storage and management.

Networking

The Domain Name System (DNS) is a hierarchical, globally distributed system responsible for associating the name of a computer, service or other resource into an IP address for connecting to the Internet or a private network. Most prominently, it translates domain names to the numerical IP addresses needed for the purpose of computer services and devices worldwide.