Run FTP on 2012 Domain controller

cja-tech-guy
cja-tech-guy used Ask the Experts™
on
Hello Experts
Can I run an FTP site on a 2012 Server that is a domain controller.  The server in question was running our FTP site, but I had to make this server a domain controller over the weekend and if I remember correctly, all local users are removed from a server when it is promoted to a DC.  Can I have local users on a 2012 DC?  previously each ftp user had a local account and would login with their own username and password and only  had rights to their FTP folder.  

Thanks,
Carmen
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Sr. Systems Administrator
Commented:
Can I have local users on a 2012 DC?

no
i would get that off of that server or demote it
a domain controller shouldn't be running network services like that

Author

Commented:
If I demote it, will local user accounts that were there before it was a DC still be there?
Lee W, MVPTechnology and Business Process Advisor
Most Valuable Expert 2013

Commented:
Unfortunately, you're asking questions most professionals don't have experience with because most professionals know not to do this.  Adding FTP to DC is a huge security risk since FTP transmits passwords in clear text.  Further, while I agree some roles in smaller organizations can reside on DCs, FTP is not one of them I would do it I had any other choice (and most clients these days don't use FTP anymore so it's not a task often done these days).

I don't know if the local database will be restored.  I'm inclined to say NO, but when you demote a DC, you're prompted to set an administrative password for the local administrator account.  I think this action has PROBABLY destroyed all your FTP accounts *IF* they were using the local accounts database as opposed to a separate FTP accounts database from using a third party FTP server.

I would strongly recommend in the future that you perform testing before doing such things.  This should be easily done thanks to virtualization and trial versions Microsoft makes available.  I'd also ask, since this is 2012, why didn't you just create a new VM for your DC?  This *IS* a virtual server right?  2012 grants 2 VMs per license so you have the license.  It would have cost nothing.  (One reason I love virtualization).

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial