Guest pez Posted May 16, 2008 Posted May 16, 2008 I know best practices state you should avoid installing IIS on a DC if at all possible. We just purchase Symantec Endpoint protection. Originally I planned on installing the management console on my XP Pro PC, but have run into the problem that XP only supports 10 concurrent connections. I would like to install the console on one of my DCs (because these are my only servers that have enough RAM to support this application). The problem is in order for the console to work it requires IIS. I understand the one of the reasons you don't want IIS installed on a DC is because of the security concerns. But if I am the only person accessing the management website is this concern really valid? What are your thoughts? Thanks for any input given.
Guest Meinolf Weber Posted May 16, 2008 Posted May 16, 2008 Re: Installing IIS on a domain controller? Hello pez, I assume the management console will manage the update form clients? We have a similar setup with Sophos antivirus, but there is an option to setup a share on the server where the clients connect and update from that share. So the client can still manage the updates without any problem. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > I know best practices state you should avoid installing IIS on a DC if > at all possible. We just purchase Symantec Endpoint protection. > Originally I planned on installing the management console on my XP Pro > PC, but have run into the problem that XP only supports 10 concurrent > connections. I would like to install the console on one of my DCs > (because these are my only servers that have enough RAM to support > this application). The problem is in order for the console to work it > requires IIS. I understand the one of the reasons you don't want IIS > installed on a DC is because of the security concerns. But if I am > the only person accessing the management website is this concern > really valid? What are your thoughts? Thanks for any input given. >
Recommended Posts