Helllo,

i'm want to make my existing fileserver (Windows Server 2003) to a second
domain controller. The first domain controller is a Windows Server 2003 R2.
Are there any known problems in making an fileserver to a domain controller?
Something i should keep an eye on making the fileserver to another DC?

--
Thanks & Regards
btbadmin

Re: Are there any known problems making an existing fileserver second by Florian

Florian
Tue Mar 25 10:12:59 PDT 2008

Howdie!

btbadmin schrieb:
> i'm want to make my existing fileserver (Windows Server 2003) to a second
> domain controller. The first domain controller is a Windows Server 2003 R2.
> Are there any known problems in making an fileserver to a domain controller?
> Something i should keep an eye on making the fileserver to another DC?

As long as it's only about file shares on the server - not really. Be
sure to not shoot yourself in the foot by granting everyone Full Control
on C:\ and subfolders - or make it writeable so that users might fill up
the disk. That might expose/damage your AD.

So apart from the security perspective that you should run as few
services as possible: no known problems afaik.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html

Re: Are there any known problems making an existing fileserver sec by btbadmin

btbadmin
Wed Mar 26 01:08:04 PDT 2008

Thanks a lot for your reply, Florian, this is very helpful for me.
I make the fileserver to a second DC next week. If i meet a problem,
i will post it here.


--
Thanks & Regards
btbadmin



"Florian Frommherz [MVP]" wrote:

> Howdie!
>
> btbadmin schrieb:
> > i'm want to make my existing fileserver (Windows Server 2003) to a second
> > domain controller. The first domain controller is a Windows Server 2003 R2.
> > Are there any known problems in making an fileserver to a domain controller?
> > Something i should keep an eye on making the fileserver to another DC?
>
> As long as it's only about file shares on the server - not really. Be
> sure to not shoot yourself in the foot by granting everyone Full Control
> on C:\ and subfolders - or make it writeable so that users might fill up
> the disk. That might expose/damage your AD.
>
> So apart from the security perspective that you should run as few
> services as possible: no known problems afaik.
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Windows Server - Group Policy.
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Use a newsreader! http://www.frickelsoft.net/news.html
>