Domain Membership

There are pros and cons to joining an Edge Server to an internal Active Directory domain. From a security perspective, it is undesirable because an Edge Server behaves identically whether it is joined to a domain or not. By not joining the Edge Server to the domain, the attack exposure is limited and there is no way a compromised Edge Server has any Active Directory information.

From a management perspective, though, having an Edge Server or multiple Edge Servers in a workgroup configuration creates some additional issues, such as security policy enforcement and patching. Administrators must manually account for patching these servers, changing local security policies instead of using Group Policy and Windows Server Update Services ...

Get Microsoft® Lync Server 2010 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.