Solved

What software do you have on your Windows 2012 R2 Domain Controllers

Posted on 2014-10-22
5
161 Views
Last Modified: 2016-10-27
HI All,
I wanted to ask everyone what software do they install as best practice on their DC's. I am building a new 2012 R2 Forest and wanted to see what others have installed on their DC's. Any suggestions and input is appreciated. Some items I can think of include Windows 2012 support tools, Resource Kit, bginfo, vnc???).
0
Comment
Question by:tigran_p
5 Comments
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 40398532
None of the above. I install a monitoring and configuration agent (such as SCOM, SCCM, Kasey) and that's it. I keep DCs sacrosanct.
0
 
LVL 26

Accepted Solution

by:
Dan McFadden earned 500 total points
ID: 40398689
I agree with Cliff.  Install as little as operationally necessary.

Typical for me:
- DPM client (backup)
- SCOM agent (monitoring)
- SCCM agent (updating)
- an AdminTools directory with portable troubleshooting tools (no install required).  eg: sysinternal suite, treesize free, dnslint, AL Tools, a few custom PS scripts, etc.

Period!

Absolutely no need to install 3rd party remote connection services, like VNC.  Use RDP.

You can install the resource kit, RSAT, 2012 support tools, etc... on your workstation.  No need to pollute your DC.

Dan
0
 
LVL 1

Expert Comment

by:Kamran Mallik
ID: 40398796
I agree, DCs should not have any third party apps as best practise. We would install Kaseya agent but that is only because I work for a managed services IT firm supporting third party clients.
0
 
LVL 9

Expert Comment

by:Zacharia Kurian
ID: 40399789
Do not install any other applications on your DC. But you can have some monitoring tools or management tools in your client PC or in a member server. I am using Manage Engine Audit Plus pro, manage engine service desk pro and Specops Gpupdate Pro.

When you choose any Antivirus, better to have Sophos but make sure to read the antivirus exclusion list on microsoft site

http://support.microsoft.com/kb/822158.

When it comes to backup use both windows backup and any other 3rd party backup tools like Symantec system recovery or Acronis. They do have better success rate when you restore to a dis similar hard ware. But to be on the safe side, do have an additional domain controller in your network.
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40399791
the only thing i've ever had running on my domain controllers is nsclient++ for nagios monitoring and sysinternals tools if needed
i keep domain controllers (particularly virtual machines) very lean
build other servers for other applications (exchange, wsus, etc.)
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

What is Backup? Backup software creates one or more copies of the data on your digital devices in case your original data is lost or damaged. Different backup solutions protect different kinds of data and different combinations of devices. For e…
We have come a long way with backup and data protection — from backing up to floppies, external drives, CDs, Blu-ray, flash drives, SSD drives, and now to the cloud.
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now